go-pkcs12

пакет pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" Пакет pkcs12 реализует часть PKCS12 также известного как P12 или PFX. Он предназначен для декодирования DER-кодированных P12/PFX файлов для использования с пакетом crypto/tls, а также для кодирования P12/PFX файлов для...

PoC-CVE-2025-69421

Воспроизводитель аварийного завершения CVE-2025-69421 Этот репозиторий содержит минимально повреждённый файл PKCS12, воспроизводящий CVE-2025-69421 в изолированной лабораторной среде. Сгенерированный PFX содержит EncryptedData, в котором EncryptedContentInfo опускает необязательное поле...

EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-3641)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

CLEANSTART-2026-GK72927 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification

Multiple security vulnerabilities affect the openssl package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. See references for individual vulnerability...

pki-toolbox

pki-toolbox 셀프 호스팅이 가능한, 100% 클라이언트 측 PKI 아티팩트 도구 모음 : X.509 인증서, PKCS10 CSR, 체인, CRL, PKCS7 및 PKCS12 번들, 원시 ASN.1, 형식 변환, 지문 및 인증서 발급. 프라이버시를 존중하는, 셀프 호스팅 가능한 온라인 인증서 디코더 대체품. 라이브 데모: https://pki-toolbox.youkyi.net 데모는 아래에서 셀프 호스팅할 수 있는 것과 동일한 정적 빌드이며, 붙여넣은 내용은 브라우저를 벗어나지 않습니다. 모든 바이트는...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. There is an “off-by-one” error in the bounds check for the PKCS12 bag element. This vulnerability allows a remote attacker to write beyond the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could le...

CVE-2026-6837-zyxel-export-cgi-command-injection

CVE-2026-6837: Zyxel export-cgi PKCS12 명령 주입 이 저장소는 CVE-2026-6837에 대한 공개 라이트업writeup, 빠른 검증 스크립트, 그리고 이를 뒷받침하는 근거 자료를 포함합니다. 개요 CVE-2026-6837은 Zyxel export-cgi 핸들러에서 발생하는 인증 후 명령 주입 취약점입니다. category=pkcs12 분기에서 핸들러는 인증서 이름과 내보내기 비밀번호로 셸 명령을 구성한 뒤 해당 문자열을 system에 전달합니다. 비밀번호에 포함된 조작된 큰따옴표가 의도된 문자열...

CVE-2025-11187

CVE-2025-11187 PKCS12 PBMAC1 PBKDF2 키 길이의 스택 버퍼 오버플로우 OpenSSL 3.X 약 1년 전에 이 스택 버퍼 오버플로우를 발견했지만, 중복 신고로 확인되었습니다 CVE-2025-11187 이 문제는 공격자가 PBKDF2의 키 길이를 제어할 때 libcrypto의 PKCS PBMAC1 처리에서 발생하며, 고정 스택 버퍼를 초과하여 쓰기를 유발합니다. OpenSSL 3.6.0에서 테스트됨 pkcs12genmac crypto/pkcs12/p12mutl.c 구성 요소: libcrypto PKCS1...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-3263)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-3338)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

CVE-2026-13586

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting an iteration-count bound issue in the PKCS12 Message Authentication Code MAC and bag-decryption Key Derivation Function KDF. This could make the affected system...

Exploit for CVE-2026-6837

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection T...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-47232

Admidio prior to v5.0.10 exposes a sensitive action (mode=export) that returns a PKCS#12 bundle containing the private key and certificate without requiring CSRF validation. The vulnerability arises because the CSRF check in modules/sso/keys.php is commented out, enabling a forged POST from an au...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-13586

In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

AZL-89181 CVE-2026-42015 affecting package gnutls for versions less than 3.8.13-1

A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...

CVE-2026-42015

A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...

RockyLinux 8 : openssl (RLSA-2026:3042)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3042 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description block...

openssl security update

An update is available for openssl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...