253 matches found
go-pkcs12
package pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" تنفّذ الحزمة pkcs12 بعضًا من مواصفات PKCS12 المعروفة أيضًا باسم P12 أو PFX. وهي مخصّصة لفك ترميز ملفات P12/PFX المشفّرة بصيغة DER لاستخدامها مع حزمة crypto/tls، ولترميز ملفات P12/PFX لاستخدامها بواسطة التطبيقات القديمة التي...
CVE-2025-11187
CVE-2025-11187 PKCS12 PBMAC1 PBKDF2 keylength में Stack buffer overflow OpenSSL 3.X लगभग एक साल पहले यह stack buffer overflow मिला था, बाद में पता चला कि यह एक duplicate है CVE-2025-11187 समस्या libcrypto के PKCS PBMAC1 हैंडलिंग में होती है जब PBKDF2 का keylength attacker-controlled होता है। यह ए...
PoC-CVE-2025-69421
مُعيد إنتاج انهيار فقط لـ CVE-2025-69421 يحتوي هذا المستودع على ملف PKCS12 تالف بأقل قدر ممكن يُعيد إنتاج CVE-2025-69421 في بيئة مخبرية معزولة. يحتوي ملف PFX المُنشأ على EncryptedData حيث يحذف EncryptedContentInfo الحقل الاختياري encryptedContent. يمكن لإصدارات OpenSSL المعرّضة للخطر تمرير مؤشر...
CVE-2026-6837-zyxel-export-cgi-command-injection
CVE-2026-6837: حقن أوامر PKCS12 عبر export-cgi من Zyxel يضم هذا المستودع التقرير العام، وسكربت التحقق السريع، والأدلة الداعمة لثغرة CVE-2026-6837. ما هذا CVE-2026-6837 هي ثغرة حقن أوامر بعد المصادقة في معالج export-cgi من Zyxel. في الفرع category=pkcs12، يبني المعالج أمر قشرة shell من اسم الشهادة...
CVE-2026-13586
A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting an iteration-count bound issue in the PKCS12 Message Authentication Code MAC and bag-decryption Key Derivation Function KDF. This could make the affected system...
Exploit for CVE-2026-6837
CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection T...
CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection
Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...
CVE-2026-47232
Admidio prior to v5.0.10 exposes a sensitive action (mode=export) that returns a PKCS#12 bundle containing the private key and certificate without requiring CSRF validation. The vulnerability arises because the CSRF check in modules/sso/keys.php is commented out, enabling a forged POST from an au...
CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection
Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...
CVE-2026-13586
In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2026-42015
A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...
RockyLinux 8 : openssl (RLSA-2026:3042)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3042 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description block...
openssl security update
An update is available for openssl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...
MiracleLinux 8 : openssl-1.1.1k-15.el8_6 (AXSA:2026-218:06)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-218:06 advisory. openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing CVE-2025-69419 Tenable has extracted the preceding description bloc...
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by providing a specially crafted, malformed PKCS12 file to an application that processes it. The flaw occurs due to a NULL pointer dereference in the PKCS12itemdecryptd2iex function when...
EUVD-2012-2197
Malware in sbrugna...
EUVD-2018-0124
Malware in sbrugna...