1260 matches found
go-pkcs12
package pkcs12 import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which do not suppo...
TWSL2011-007_iOS_code_workaround
= testcert Reference implementation for TWSL2011-007 vulnerability workaround aka CVE-2011-0228. Author: Eric Monti Date: July 28, 2011 = Compiling Compile with your Apple iOS SDK CFLAGS along with: gcc -o testcert testcert.m -framework Foundation -framework Security The compile arguments above...
Checking DER Commands against Grid Context Catches Credentialed Attacks Static Checks Miss
Authorization of distributed energy resource DER commands judges a command by who sent it and whether its value has been seen before. An attacker holding a legitimate credential who writes ordinary values passes both tests. We add a check that judges each DER write against the grid's operating...
CVE-2026-91163
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/clientcerts.rs to accept certificates at the TLS layer and defer validation to...
CVE-2026-91163 Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/clientcerts.rs to accept certificates at the TLS layer and defer validation to...
CVE-2026-91163
The Warpgate bastion host (versions prior to 0.29.0 ) contains a vulnerability in its Kubernetes protocol listener. The component warpgate-protocol-kubernetes/src/server/client_certs.rs uses AcceptAnyClientCert to accept certificates at the TLS layer, deferring validation to warpgate-protocol-kub...
CVE-2026-91163 Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/clientcerts.rs to accept certificates at the TLS layer and defer validation to...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
PT-2026-136997
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/client certs.rs to accept certificates at the TLS layer and defer validation to...
CVE-2026-91163: warp-tech warpgate: Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux
Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyClientCert in warpgate-protocol-kubernetes/src/server/clientcerts.rs to accept certificates at the TLS layer and defer validation to...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
heimdal
Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...
CLEANSTART-2026-NC68748 Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion
CVE-2025-58185 affects multiple packages. Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion. See references for individual vulnerability details...
GHSA-2QM8-X737-GMW5 pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
Summary In pyasn1 through 0.6.4, decoding a constructed BIT STRING with many fragments repeatedly shifts and copies the entire value accumulated so far. For fixed-size fragments, CPU time grows quadratically with the encoded input size. An application that passes sufficiently large,...
EUVD-2026-113353
pyasn1 has quadratic-complexity denial of service in binary REAL decoding...
GHSA-MM57-4V3P-RCHX pyasn1 has quadratic-complexity denial of service in binary REAL decoding
Summary In pyasn1 0.6.4 and earlier, decoding a binary-encoded ASN.1 REAL with a large mantissa can consume CPU time quadratic in the mantissa length. The BER, CER, and DER decoders all use the affected RealPayloadDecoder. An application is exposed when it passes attacker-controlled ASN.1...