PoC Archive PoC Archive

tag

Mtls

  • CVE-2026-29781 network HIGH

    Sliver C2 Server mTLS Nil-Pointer Panic / Infrastructure Kill-Switch — CVE-2026-29781

    Sliver C2's transport-layer protobuf handlers (mTLS, WireGuard, DNS) lack consistent nil-pointer validation and lack a recover() mechanism around packet processing. A party in possession of a captured implant's mTLS certificate, private key, and Age secret…

    Unverified 2026-07-05
  • CVE-2026-29145 web CRITICAL 9.1

    Apache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145

    When Tomcat is configured to use Mutual TLS (CLIENTCERT) authentication together with OCSP revocation checking in hard-fail mode, it is expected to reject any client certificate whose revocation status cannot be confirmed. This PoC demonstrates that when the…

    Patched 2026-07-05
  • CVE-2026-8932 network LOW

    libcurl mTLS Connection Reuse Authentication Bypass (CVE-2026-8932)

    CVE-2026-8932 is a Low-severity authentication bypass in libcurl's TLS connection reuse logic. Certain mTLS private-key configuration parameters (key file path, key type, key password) were omitted from the connection-matching comparison performed when…

    Patched 2026-06-30