SUSE CVE-2026-56850

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw

A flaw was found in Node.js. The HTTPS Agent, responsible for managing secure connections, can incorrectly reuse client identities across different requests. This occurs due to a technical issue with PFX object-array key collisions during connection reuse. As a result, a client's identity,...

CVE-2026-53055

creationtimestamp| type| source ---|---|--- 2026-06-24 19:13:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806673458605612...

CVE-2026-12782

creationtimestamp| type| source ---|---|--- 2026-06-21 10:32:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116787630904398394 2026-06-22 01:39:40+00:00| seen| https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master...

CVE-2026-49257

creationtimestamp| type| source ---|---|--- 2026-06-18 21:30:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/116773238347097877 2026-06-18 21:30:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molrkuu26z27 2026-06-18 22:03:44+00:00| seen|...

CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...

CVE-2026-11134

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11122

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-10985

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-10978

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-34910

creationtimestamp| type| source ---|---|--- 2026-05-22 14:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116618778795603147 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

CVE-2026-42994

creationtimestamp| type| source ---|---|--- 2026-05-01 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116497791564275450 2026-05-01 06:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkrha6jb7626 2026-05-01 06:39:25+00:00| seen|...

openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by providing a specially crafted, malformed PKCS12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12itemdecryptd2iex function when...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

CVE-2026-4454

creationtimestamp| type| source ---|---|--- 2026-03-20 06:41:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116260136237858100 2026-03-22 02:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmh72zff32t 2026-03-24 01:00:00+00:00| seen|...

CVE-2026-22322

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22322 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...