GHSA-84gm-v5wh-659w

Exploit Intelligence

• A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installation : $ apt update && apt upgrade $ apt install git $ apt install python2 $ apt install python $ git clone https://github.com/hahwul/ a2... (github-poc-repo)
• A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installation : $ apt update && apt upgrade $ apt install git $ apt install python2 $ apt install python $ git clone https://github.com/hahwul/ a2... (github-poc-repo)
• secretnonempty/CVE-2014-0224 (github-poc)
• ssllabs/openssl-ccs-cve-2014-0224 (github-poc)
• Used for evaluating hosts for CVE-2014-0224 (github-poc)
• iph0n3/CVE-2014-0224 (github-poc)
• This script is designed for detection of vulnerable servers (CVE-2014-0224.) in a wide range of configurations. It attempts to negotiate using each affected protocol version (SSLv3, TLSv1, TLSv1.1, and TLSv1.2) advertising a comprehensive set of ciphers. (github-poc)
• Performs a testssl.sh test on SSL/TLS port and displays tool output. (nmap-nse)
• Performs a testssl.sh test on SSL/TLS port and displays tool output. (nmap-nse)
• nuclei_routing.go (github-poc)

…and 1 more exploits

Timeline

• CVE Published
• Apr 11, 2025 PoC Published
• Apr 9, 2026 Security Advisory