hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

gringotts

CVE-2020-0601 概念実証 Windows 10 の CVE-2020-0601 脆弱性を利用して、独自のルート CA と署名済み証明書を作成する楽しい概念実証です。この問題の根本は、CertGetCertificateChain メソッドがルート証明機関を不適切に検証していたことにあります。トラストストア内の署名証明書を検索する処理はコストがかかるため、Microsoft はキャッシュを実装し、指定されたルート証明書の公開鍵を使ってその証明書が以前にトラストストアから読み込まれたかどうかを判断していました。しかし、楕円曲線証明書の場合、SubjectPublicKeyInfo...

CVE-2026-29114

CVE-2026-29114 — Dahua 公開デバイス CA ルート証明書 アドバイザリ種別: ベンダー協調型セキュリティ開示 CVE ID: CVE-2026-29114 ベンダー: Dahua Technology 公開日: 2026-06-10T05:44:50 UTC 最終更新日: 2026-06-10T05:44:50 UTC ソース: Dahua 製品セキュリティインシデント PSI トラストセンター 目次 エグゼクティブサマリー 概要 関連CVEとの関係 脆弱性タイムライン 説明 技術的分析 影響を受ける製品 CVSSスコアリング 脆弱性スコアリングの詳細 CWE分類...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 二層PKI階層 EJBCA Community Editionを使用した二層PKI階層におけるNIST FIPS 204 ML-DSAの実践的実装 📖 完全なウォークスルー: ポスト量子PKIの構築: EJBCA上でML-DSAを使用してルートCAとサブCAに署名した方法 このラボが構築するもの 2つの独立した仮想マシン上で動作する完全な純粋PQC PKI階層。各VMには独自のEJBCAコンテナがあります。 VM 1 — Root CA └─ ML-DSA-65 self-signed Root CA └─ CRL...

ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

CVE-2025-71426

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

CVE-2026-67278

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...

CVE-2026-67278 TLS server impersonation possible in Mikrotik RouterOS

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...

CVE-2026-67278 TLS server impersonation possible in Mikrotik RouterOS

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...

PT-2026-86453

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.49.21 MikroTik RouterOS versions prior to 7.23.4 MikroTik RouterOS versions prior to 7.24.2 Description RouterOS accepts malformed RSA/PKCS1 v1.5 signatures during X.509 validation. Due to the inclusion of...

openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

A flaw was found in the Certificate Management Protocol CMP implementation within OpenSSL. An attacker with existing Registration Authority RA level credentials could exploit an error in the certificate verification process during a Root Certificate Authority CA key update. This vulnerability...

CVE-2026-48508 Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission

Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flaskprincipal.Permission.init with zero Need objects when ADMINONLYAUTHORITYCREATION and LEMURSTRICTROLEENFORCEMENT are unset because both flags default t...

JLSEC-2026-1141 Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key...

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol CMP message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Authority RA level to t...

CVE-2026-12249

An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services AD CS certificate auto-enrollment via the vendored Samba client script internal/policies/certificate/python/vendorsamba/gp/gpcertautoenrollext.py, ADSys utilizes a plaintext...

CVE-2026-12249

Canonical ADSys upstream versions up to v0.16.2 expose a flaw in AD CS auto-enrollment where the vendored Samba client uses plaintext HTTP (GETCACert) to fetch the CA certificate, enabling a network attacker in a MITM position to supply an attacker-controlled Root CA. This leads to automatic enro...

Linux Distros Unpatched Vulnerability : CVE-2026-42769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol CMP message response...

AZL-92840 CVE-2026-42769 affecting package openssl for versions less than 3.3.7-4

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol CMP message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Authority RA level to t...

CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol CMP message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Authority RA level to t...

OpenSSL 加密问题漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

CVE-2026-32281

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...