badkeys

badkeys Herramienta y biblioteca para comprobar claves públicas criptográficas en busca de vulnerabilidades conocidas ¿Qué? badkeys comprueba claves públicas en varios formatos en busca de vulnerabilidades conocidas. Puedes encontrar una versión web en badkeys.info. instalación badkeys se puede...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was originally created by Roland Bischofberger and Emanuel Duss...

cve-2026-25262-sm8450-research

Confirmación Experimental de CVE-2026-25262 en Snapdragon 8 Gen 1 SM8450 Estado: Éxito parcial — escritura arbitraria en SRAM confirmada, inicialización completa de Firehose pendiente. Este repositorio contiene los resultados de un estudio experimental sobre la aplicabilidad de CVE-2026-25262...

rdap

OpenRDAP es una implementación en Go de un cliente de línea de comandos RDAP. https://www.openrdap.org - página principal https://www.openrdap.org/demo - demo en vivo Características Cliente RDAP de línea de comandos Formatos de salida: texto, JSON, estilo WHOIS Tipos de consulta admitidos: ip...

CVE-2022-0778

CVE-2022-0778 La vulnerabilidad descubierta provoca un bucle infinito en la función BNmodsqrt de OpenSSL al analizar una clave de curva elíptica. Esto significa que un certificado X.509 manipulado de forma maliciosa puede provocar un DoS en cualquier servidor sin parchear. El núcleo de la...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

CVE-2026-95616 Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

CVE-2026-95616 Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

CVE-2026-95616

Apache WSS4J is vulnerable to an integer overflow in its DER bounds check, which allows an oversized allocation to bypass validation. An unauthenticated attacker can exploit this by sending a SOAP message containing an X.509 certificate where the SubjectKeyIdentifier extension declares a length o...

clone-cert

clone-cert.sh Este es un script de shell simple que recupera el certificado X.509 asociado a un puerto TCP envuelto en TLS y utiliza openssl para crear un certificado similar reemplazando la clave pública y corrigiendo la firma. Esto es particularmente útil si desea demostrar por qué los...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

SpookySSL-Scanner

SpookySSL-Scanner Escáner SpookySSL CVE-2022-3602 SSLv3 para Windows, Linux, macOS ¿Cómo se origina la vulnerabilidad? Primero, el problema surge al determinar el tamaño del byte. Al determinar el tamaño del byte, si no se define un valor NULL vacío/cero, la longitud del byte puede establecerse...

pki-toolbox

pki-toolbox A self-hosted, 100 % client-side toolbox for PKI artefacts : X.509 certificates, PKCS10 CSRs, chains, CRLs, PKCS7 and PKCS12 bundles, raw ASN.1, format conversion, fingerprints and certificate issuance. A privacy-respecting, self-hostable replacement for online certificate decoders...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-102758

The NetX Secure library contains a vulnerability in the _nx_secure_x509_asn1_tlv_block_parse() function, which handles ASN.1 TLV blocks during X.509 certificate parsing. The root cause is an out-of-bounds read because the function reads a one-byte ASN.1 tag from the buffer before verifying that t...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

EUVD-2026-89113

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-84783

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...

DEBIAN-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...