Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Unauthenticated remote root CA installation via eMudhra emBridge 3.3.1.0 (drive-by to TLS MITM) on RHEL-family Linux operating systems

squeal's profile picture

Karan Saini

4,514 subscribers

18,925 Aufrufe • vor 1 Tag •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

11 Kommentare

Profilbild von nisarga
nisargavor 1 Tag

banger after banger

Profilbild von Karan Saini
Karan Sainivor 1 Tag

thx boss ;-)

Profilbild von Nevidium
Nevidiumvor 1 Tag

looks like you will take down their rest of the business too!! Thanks for exposing these liars

Profilbild von Lane Henslee
Lane Hensleevor 1 Tag

eMudhra sells certificates for a living, and emBridge lets any website install its own root CA for free

Profilbild von Sumith
Sumithvor 1 Tag

Same as CVE-2026-125659 ?

Profilbild von Karan Saini
Karan Sainivor 1 Tag

No, different bug, affects the latest build

Profilbild von Yaksh Bariya
Yaksh Bariyavor 23 Stunden

Lemme see what embridge is, and if I can recreate it. Anyways when you publish the writing, do let me know

Profilbild von Underdog
Underdogvor 1 Tag

Saini sahab on top

Profilbild von Soham
Sohamvor 1 Tag

Which rhel? We are running rhel 8 and 9 in our org

Profilbild von Salman Asad ⚡
Salman Asad ⚡vor 14 Stunden

🔥

Profilbild von jyotishbaba
jyotishbabavor 23 Stunden

patal lok

Ähnliche Videos

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.
12:44

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

37,025 Aufrufe • vor 6 Monaten

Linux is the future of operating systems.
0:57

Linux is the future of operating systems.

Ilya Miro

114,784 Aufrufe • vor 2 Monaten

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem
1:11

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

White Page

179,600 Aufrufe • vor 5 Monaten

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux
0:56

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

ilyamiro

908,100 Aufrufe • vor 2 Monaten

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.
20:26

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

The Lunduke Journal

21,003 Aufrufe • vor 3 Monaten

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.
18:30

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

The Lunduke Journal

29,825 Aufrufe • vor 2 Monaten

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos
2:44

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

David Bombal

29,867 Aufrufe • vor 7 Monaten

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL
0:28

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat

21,270 Aufrufe • vor 2 Jahren

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services
1:33

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 Aufrufe • vor 24 Tagen

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.
14:07

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

The Lunduke Journal

117,419 Aufrufe • vor 8 Monaten

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos
5:23

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

TechMakesArt

74,800 Aufrufe • vor 1 Jahr

Kali Linux Installation. (4 Minutes guide)
3:59

Kali Linux Installation. (4 Minutes guide)

Oluwatobi Mustapha

88,144 Aufrufe • vor 1 Jahr

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.
13:03

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

The Lunduke Journal

349,545 Aufrufe • vor 8 Monaten

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.
16:18

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

The Lunduke Journal

30,143 Aufrufe • vor 6 Monaten

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software
1:57

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

Coding with Lewis

25,400 Aufrufe • vor 1 Monat

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.
12:58

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

The Lunduke Journal

13,879 Aufrufe • vor 6 Monaten

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource
1:42

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

vallarine99

10,300 Aufrufe • vor 2 Monaten

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct
1:06

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

eNCA

62,703 Aufrufe • vor 1 Jahr

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,567 Aufrufe • vor 4 Monaten