1002 matches found
AZL-78915 CVE-2025-58188 affecting package golang 1.25.7-1
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...
AZL-69275 CVE-2025-58188 affecting package golang 1.26.0-1
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...
CVE-2025-58187
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
CVE-2025-58188
CVE-2025-58188 (panic on validating certificate chains with DSA keys) is confirmed in an F5 advisory tied to BIG-IP Next for Kubernetes. Affected component set includes TMM, f5-dwbld, and f5-downloader; the root cause is a cast assuming an Equal method when validating certificate chains containin...
CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...
CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...
CVE-2025-58187
The CVE 2025-58187-name constraints issue is disclosed in F5 advisory for BIG-IP Next for Kubernetes, with a root cause in the crypto/x509 name-contraint check logic that leads to non-linear (quadratic) processing times on some certificates, causing potential DoS via excessive CPU usage. Affected...
CVE-2025-58187 Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
Uncaught Exception
Overview std/crypto/x509 is a Go standard library package std/crypto/x509 Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes...
CVE-2025-34292 BeWelcome/Rox PHP Object Injection RCE
Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize: the POST parameter formkitmemoryrecovery in \RoxPostHandler::getCallbackAction and the 'memory cookie' read by...
Cyberattack Detection in Critical Infrastructure and Supply Chains
Cyberattack detection in Critical Infrastructure and Supply Chains has become challenging in Industry 4.0. Intrusion Detection Systems IDS are deployed to counter the cyberattacks. However, an IDS effectively detects attacks based on the known signatures and patterns, Zero-day attacks go...
CVE-2025-62375 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains...
GHSA-72C7-4G63-HPW5 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains...
GHSA-72C7-4G63-HPW5 vulnerabilities
Vulnerabilities for packages: tekton-chains, tekton-chains-fips, tkn, tkn-fips...
CVE-2025-62375 vulnerabilities
Vulnerabilities for packages: tekton-chains, tekton-chains-fips, tkn, tkn-fips...
SUSE CVE-2025-58187
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
SUSE CVE-2025-58188
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains...
LabExploit
LiveExploit SECURITY RESEARCH TOOL - USE RESPONSIBLY A...
