go-pkcs12

package pkcs12 import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which do not suppo...

CVE-2023-38408

ثغرة OpenSSH - CVE-2023-38408 📚 مقدمة تم العثور على ثغرة في OpenSSH قبل الإصدار 9.3p2. تحتوي ميزة PKCS11 في ssh-agent في OpenSSH على مسار بحث غير موثوق بما يكفي، مما يؤدي إلى تنفيذ تعليمات برمجية عن بُعد إذا تم توجيه الوكيل إلى نظام يتحكم فيه المهاجم الكود في /usr/lib ليس بالضرورة آمنًا للتحميل ف...

PKCS11SSHAgent

SRO PKCS11 – SSH Agent CNG Sovereign unification PKCS11 + SSH-agent + Pageant + CNG/Smartcard A single Windows executable that unifies four traditionally separate functions: Full PKCS11 module Firefox, OpenSC, ssh -I SSH agent compatible with OpenSSH/Git/VS/WSL Pageant server compatible with...

PoC-CVE-2025-69421

Reproducteur de plantage uniquement pour CVE-2025-69421 Ce dépôt contient un fichier PKCS12 malformé minimal qui reproduit CVE-2025-69421 dans un environnement de laboratoire isolé. Le PFX généré contient un EncryptedData dont le EncryptedContentInfo omet le champ optionnel encryptedContent. Les...

CVE-2026-33317

CVE-2026-33317 Preuve de concept OP-TEE PKCS11 Ce dépôt contient la preuve de concept du monde normal, les notes de reproduction, et les journaux capturés pour CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. L'avis officiel OP-TEE décrit une validation manquante dans entrygetattributevalue pour...

openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...

pki-toolbox

pki-toolbox Une boîte à outils auto-hébergée, 100 % côté client pour les artefacts PKI : certificats X.509, CSR PKCS10, chaînes, CRL, bundles PKCS7 et PKCS12, ASN.1 brut, conversion de format, empreintes et émission de certificats. Une alternative respectueuse de la vie privée et auto-hébergeable...

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 مقدمة تم العثور على ثغرة أمنية في OpenSSH قبل الإصدار 9.3p2. تحتوي ميزة PKCS11 في ssh-agent ضمن OpenSSH على مسار بحث غير موثوق بما فيه الكفاية، مما يؤدي إلى تنفيذ تعليمات برمجية عن بُعد إذا تمت إعادة توجيه الوكيل agent إلى نظام يتحكم به المهاجم الكود الموج...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS. The gnutlspkcs11tokensetpin function, which is used to change the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...

CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

MikroTik RouterOS Improper Verification of Cryptographic Signature (CVE-2026-67278)

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...

CVE-2026-6837-zyxel-export-cgi-command-injection

CVE-2026-6837 : Injection de commande PKCS12 dans Zyxel export-cgi Ce dépôt regroupe l'analyse publique, le script de vérification rapide et les preuves associées pour CVE-2026-6837. Ce que c'est CVE-2026-6837 est une faille d'injection de commande post-authentification dans le gestionnaire...

CVE-2025-11187

CVE-2025-11187 تجاوز سعة المخزن المؤقت للمكدس في keylength لـ PBKDF2 الخاص بـ PBMAC1 في PKCS12 OpenSSL 3.X اكتشفت هذا التجاوز في سعة المخزن المؤقت للمكدس منذ حوالي عام، واتضح أنه مكرر CVE-2025-11187 تحدث المشكلة في معالجة libcrypto لـ PKCS PBMAC1 عندما يكون keylength الخاص بـ PBKDF2 خاضعًا للتحكم...

DEBIAN-CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

UBUNTU-CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873

The Bouncy Castle for Java library (before versions 1.86 and LTS 2.73.13 ) contains a vulnerability where the raw JCA provider's legacy PBES1 and PKCS#12 PBE families derive keys using an iteration count from untrusted input without bounding. An attacker could provide a small input to dictate an ...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...