1549 matches found
CVE-2022-23648-POC
PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...
OpenSC.tokend
OpenSC.tokend The open source OS X smart card driver A tokend makes the keys and certificates on your smart card appear in Keychain Access.app and available to applications like Safari or Chrome. OpenSC.tokend is the open source tokend implementation from OpenSC, with support for many different...
mimikatz-missing-manual
The Mimikatz Missing Manual The definitive guide to Windows Identity, Kerberos, and PKI Research. Originally developed as a private, high-end training curriculum for security conferences, this material is now being released to the public. Much of the technical depth and internal logic documented...
CVE-2022-2414-Proof-Of-Concept
CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...
LAMMA-beta
LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framework beta Table O...
ejbca-pqc-lab
EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
pki-toolbox
pki-toolbox A self-hosted, 100 % client-side toolbox for PKI artefacts : X.509 certificates, PKCS10 CSRs, chains, CRLs, PKCS7 and PKCS12 bundles, raw ASN.1, format conversion, fingerprints and certificate issuance. A privacy-respecting, self-hostable replacement for online certificate decoders...
Google BoringSSL Name Constraints Bypass in SAN Validation Logic
Overview Five Name Constraints findings in BoringSSL VU410595.8–.12 describe cases where certificate names may not be constrained as intended. Records .8, .9, .10 and .12 concern the legacy crypto/x509 path; .11 concerns the newer pki path. Two have been fixed, one is accepted, one is disputed, a...
RLSA-2026:77648 Important: dogtag-pki security update
IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: Certificate Authority CA Key Recovery Authority KRA Online Certificate Status Protocol OCSP Manager Token Key Service TKS Token Processing...
dogtag-pki security update
An update is available for dogtag-pki. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list IdM PKI is an enterprise software system designed to manage enterprise...
Oracle Linux 10 : dogtag-pki (ELSA-2026-77648)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-77648 advisory. 11.9.0-6.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-8 - Update jackson bundled to 2.21.6 - Resolves:...
Oracle Linux 8 : pki-core:10.6 (ELSA-2026-75573)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75573 advisory. - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM rhel-8 - RHEL-245455 CVE-2026-76561 pki-core:...
CVE-2026-88648
A flaw was found in GnuTLS. An attacker controlling a subordinate Certificate Authority CA can exploit an incomplete X.509 certificate validation mechanism to bypass cross-domain Public Key Infrastructure PKI restrictions. This allows unauthorized certificates to be accepted as valid, potentially...
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
In this article 1. Why post-quantum authentication presents a different challenge 2. Why organizations should begin preparing now 3. Microsoft's perspective on readiness 4. Testing the future certificate ecosystem 5. Expanding end-to-end testing 6. What organizations can do today 7. Looking ahead...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
Important: Red Hat Security Advisory: dogtag-pki security update
An update for dogtag-pki is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
EUVD-2026-94641
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...
