hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...

CVE-2026-29114

CVE-2026-29114 — Dahua Exposed Device CA Root Certificate Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29114 Vendor: Dahua Technology Published: 2026-06-10T05:44:50 UTC Last Modified: 2026-06-10T05:44:50 UTC Source: Dahua Product Security Incident PSI Trust Center Table ...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3337)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3337 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

Amazon Linux 2 : ca-certificates (ALAS-2026-4045)

The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

SUSE SLES16 Security Update : ca-certificates-mozilla (SUSE-SU-2026:24361-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24361-1 advisory. This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 -...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3306)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3306 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL...

Medium: ca-certificates

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

Medium: ca-certificates

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

openSUSE 16 Security Update : ca-certificates-mozilla (openSUSE-SU-2026:22154-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22154-1 advisory. This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 - emSign ECC Root...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

SUSE-SU-2026:24373-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

SUSE-SU-2026:24414-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

SUSE-SU-2026:24361-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

SUSE-SU-2026:4847-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

SUSE-SU-2026:4820-1 Security update for openssl-certs

This update for openssl-certs fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

Oracle Linux 10 : ca-certificates (ELSA-2026-88455)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88455 advisory. 2026.2.92v9.0.319-100.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-100.2 - Removing: emSign Root CS CA - G3 from...