CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept Se encontró una falla en pki-core. El acceso a entidades externas al analizar documentos XML puede provocar ataques de entidad externa XML XXE. Esta falla permite que un atacante remoto pueda recuperar el contenido de archivos arbitrarios mediante el envío de...

mimikatz-missing-manual

El Manual Perdido de Mimikatz La guía definitiva sobre identidad de Windows, Kerberos e investigación de PKI. Originalmente desarrollado como un plan de estudios privado y de alto nivel para conferencias de seguridad, este material ahora se publica al público. Gran parte de la profundidad técnica...

LAMMA-beta

LAMMA BETA Marco de Evaluación de Vulnerabilidades para todas las Implementaciones Criptográficas. Una Iniciativa de Código Abierto por - SECURITY MONX Documentación del Framework Lamma beta Nombre del archivo : README Autor : @ajithatti Organización : Security Monx Versión : 0.0.1 Propósito :...

OpenSC.tokend

OpenSC.tokend El controlador de tarjetas inteligentes de código abierto para OS X Un tokend hace que las claves y certificados de tu tarjeta inteligente aparezcan en Keychain Access.app y estén disponibles para aplicaciones como Safari o Chrome. OpenSC.tokend es la implementación de tokend de...

CVE-2022-23648-POC

PoC para CVE-2022-23648 Esto es una prueba de concepto para el CVE-2022-23648 de @fel1x. Información de la divulgación aquí, información del CVE aquí y un blog con más información e ideas de mitigación aquí. El Containerfile tiene la información necesaria, y puedes cambiar el destino del VOLUME...

ejbca-pqc-lab

Laboratorio PQC Puro con EJBCA — Jerarquía PKI de Dos Niveles ML-DSA-65 Una implementación práctica de NIST FIPS 204 ML-DSA en una jerarquía PKI de dos niveles utilizando EJBCA Community Edition. 📖 Guía completa: Construyendo una PKI Post-Cuántica: Cómo firmé una CA Raíz y una CA Subordinada usan...

CVE-2026-71543

A flaw was found in OpenBao, an open-source identity-based secrets management system. Templated Access Control List ACL, Public Key Infrastructure PKI, and Secure Shell SSH policies could substitute attacker-controlled identity data without properly rejecting syntax-significant characters. This...

pki-toolbox

pki-toolbox A self-hosted, 100 % client-side toolbox for PKI artefacts : X.509 certificates, PKCS10 CSRs, chains, CRLs, PKCS7 and PKCS12 bundles, raw ASN.1, format conversion, fingerprints and certificate issuance. A privacy-respecting, self-hostable replacement for online certificate decoders...

GHSA-59W7-V8RR-PR4P OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

Impact ACL Policies OpenBao supports "templated polices": Policies with placeholders that are replaced at evaluation time. This allows you to write a single policy which e.g. grants user "alice" access to all entries in a key value engine prefixed with alice/ while granting "bob" access to bob/,...

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

Impact ACL Policies OpenBao supports "templated polices": Policies with placeholders that are replaced at evaluation time. This allows you to write a single policy which e.g. grants user "alice" access to all entries in a key value engine prefixed with alice/ while granting "bob" access to bob/,...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the templated policy processing. An attacker can gain unauthorized access, escalate privileges, or issue unauthorized certificates by injecting wildcard or syntax-significant characters into identity data...

CVE-2026-80110

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...

UBUNTU-CVE-2026-80110

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...

CVE-2026-80110 Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...

CVE-2026-80110

pki-core (Dogtag PKI) contains a flaw in its v2 REST ACL filter that resolves colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity. This causes a wildcard-mapped permission to override a more specific literal-mapped permission. In the CA's profile-...

CVE-2026-80110

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...

Linux Distros Unpatched Vulnerability : CVE-2026-80110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string...

dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects

A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated ACME account holder can exploit this to perform server-side...

RHEL 8 : Red Hat Certificate System 10.4.4 security update for RHEL 8 (Moderate) (RHSA-2026:67110)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67110 advisory. Red Hat Certificate System RHCS is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructur...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...