CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1 . The flaw occurs during the parsing of uploaded X.509 PEM certificates for management display because the system fails to properly validate the length of the Authority...

EUVD-2026-94671

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

CVE-2026-87676

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

EUVD-2026-95206

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-67693

A flaw exists in gnutls v.3.8.13 where the certificate verification process fails to properly reject end-entity X.509 certificates containing contradictory combinations of Key Usage (KU) and Extended Key Usage (EKU) extensions. These extensions define the permitted cryptographic operations of a c...

CVE-2026-88648

An incomplete X.509 implementation in GnuTLS v3.8.13 allows an attacker who controls a subordinate Certificate Authority to bypass cross-domain PKI restrictions . This flaw enables the unauthorized issuance of certificates. No specific remediation or exploit details are provided in the documents.

CVE-2026-95208

The wolfSSL library versions v5.9.1 and v5.9.2 are vulnerable to a Denial of Service (DoS) condition due to an issue in the ConfirmNameConstraints() function located in wolfcrypt/src/asn.c. An attacker can provide crafted Certificate Authority certificates which cause wolfSSL-based TLS clients to...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, resulting in a Denial of Service (DoS) . The provided documents do not specify the underlying root cause, specific component details, or available remediation steps. Exploitation details are not provided.

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

EUVD-2026-95204

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-95208

An issue in the ConfirmNameConstraints function wolfcrypt/src/asn.c of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service DoS via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS...

attezt

attezt attezt es un conjunto de herramientas de atestación remota. Proporciona varios componentes que permiten a los sistemas Linux tener certificados de dispositivo respaldados por hardware mediante el desafío ACME device-attest-01. Esto es útil para entornos donde se desea una afirmación sólida...

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains ccTLDs and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh Ghana, .sl Sierra Leone or .as American Samoa was put at risk...

CVE-2026-106584

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

CVE-2026-106584

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

CVE-2024-7344

🐞 CVE-2024-7344: Improper PE Image Loading This repository contains research material related to CVE-2024-7344, a Secure Boot bypass vulnerability affecting UEFI systems. It centralizes technical analysis of the vulnerability, attack flow documentation, and recreated applications designed to...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. Conexiones de red y configuración SSL/TLS El análisis de memoria de Process Hacker revela que AcrStealer establece conexiones de red mediante SSL/TLS para comunicarse de forma segura con su servidor C2. Observaciones clave: SslClientCert – Utiliza certificados de cliente para la autenticación...

Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...