CertificateDsc

CertificateDsc 行为准则 本项目采用了此行为准则。 发布 每次合并到 main 分支时，都会将预览版发布到 PowerShell Gallery。定期会推送一个发布版本标签，该标签会将完整版本发布到 PowerShell Gallery。 参与贡献 请查看 DSC Community 通用的贡献指南。 更新日志 每个版本的完整更改列表可在更新日志中找到。 资源 CertificateDsc 模块是 Windows PowerShell 期望状态配置 DSC 资源工具包的一部分，该工具包是一组 DSC 资源的集合。此模块包含的 DSC 资源可使用简单的声明式语言简化...

sslx

sslx openssl だけど、フラグをググる必要はない。 証明書やTLS接続、通常3つの異なるopenssl呼び出しが必要なすべてのことを処理する単一のバイナリ。Rustとrustlsで構築されており、システムのOpenSSLは不要です。 Install root@kitploit: cargo install sslx ビルド済みバイナリはリリースページにあります。 Homebrew: root@kitploit: brew install glincker/tap/sslx または直接ダウンロード： root@kitploit: macOS Apple Silicon curl...

openvpn-install

openvpn-install 适用于 Debian、Ubuntu、Fedora、openSUSE、CentOS、Amazon Linux、Arch Linux、Oracle Linux、Rocky Linux 和 AlmaLinux 的 OpenVPN 安装程序。 该脚本可让您在几秒钟内设置并管理自己的安全 VPN 服务器。 这是什么？ 此脚本旨在您自己的服务器上运行，无论是 VPS、专用服务器，甚至是家中的计算机。 设置完成后，您将能够为每个想要接入的设备生成客户端配置文件。 每个客户端都可以将其互联网流量通过服务器路由，全程加密。mermaid graph LR APhone...

certbot

.. 本文件包含一系列注释，用于在其他文件中引用本 README 的各个部分。除非你了解其作用，否则请勿修改这些注释。tag:intro-begin |build-status| .. |build-status| image:: https://img.shields.io/github/actions/workflow/status/certbot/certbot/nightly.yml :target: https://github.com/certbot/certbot/actions/workflows/nightly.yml :alt: GitHub Actions 夜间 C...

infisical

La plataforma de gestión de secretos de código abierto : Sincroniza secretos/configuraciones en tu equipo/infraestructura y previene fugas de secretos. Slack | Infisical Cloud | Autoalojamiento | Documentación | Sitio web | Twitter | Empleo Remoto/SF Introducción Infisical es la plataforma de...

openssl: CMP indefinite cache growth of ExtraCerts

A flaw was found in OpenSSL. The CMP Certificate Management Protocol implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra...

ALPINE-CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

CVE-2026-70666

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:18+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-xpmj-wjcp-6pww 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-71308

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:09+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-cfh6-pv5c-38jv 2026-08-19 01:22:20+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtfky2ijcb2v 2026-08-19 06:44:38+00:00...

GHSA-4H97-P9WQ-CHQJ Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False

Summary The CertificateExport handler in lemur/certificates/views.py nests its entire ownership / CertificatePermission check inside an if plugin.requireskey: branch. When the selected export plugin advertises requireskey = False, the authorization check is skipped entirely and any authenticated...

CVE-2026-71417

Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/certificates/upload allowed a non-read-only user to create a duplicate row using another certificate body, authorityid, serial, or externalid without requiring permission on the underlying authority. PUT /api/1/certificates//revo...

CVE-2026-70666

Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...

EUVD-2026-61155

Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...

EUVD-2026-61153

Lemur manages TLS certificate creation. Prior to 1.9.3, GET /api/1/destinations and GET /api/1/destinations/ relied only on authentication while sibling write handlers required adminpermission. DestinationOutputSchema returned raw options and copied them into pluginOptions without redacting...

CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership

Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...

CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership

Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: rancher-webhook, juicefs, k6, cert-manager-cmctl, rancher-agent, teleport, sftpgo-plugin-auth, zot, grafana, seaweedfs, kyverno-notation-aws, opentofu, harbor, dex, gitlab-runner, frp, cert-manager-istio-csr, flux-source-controller, external-secrets-operator, openbao...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1

cert-manager Operator for Red Hat OpenShift 1.19.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CVE-2026-72880

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and packages/server/src/services/certificate.ts joins that value to the certificate root withou...

JLSEC-2026-1141 Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key...

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol CMP message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Authority RA level to t...