Загрузка видео...

Не удалось загрузить видео

На главную

Unauthenticated remote root CA installation via eMudhra emBridge 3.3.1.0 (drive-by to TLS MITM) on RHEL-family Linux operating systems

squeal's profile picture

Karan Saini

4,514 subscribers

18,925 просмотров • 1 день назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 11

Фото профиля nisarga
nisarga1 день назад

banger after banger

Фото профиля Karan Saini
Karan Saini1 день назад

thx boss ;-)

Фото профиля Nevidium
Nevidium1 день назад

looks like you will take down their rest of the business too!! Thanks for exposing these liars

Фото профиля Lane Henslee
Lane Henslee1 день назад

eMudhra sells certificates for a living, and emBridge lets any website install its own root CA for free

Фото профиля Sumith
Sumith1 день назад

Same as CVE-2026-125659 ?

Фото профиля Karan Saini
Karan Saini1 день назад

No, different bug, affects the latest build

Фото профиля Yaksh Bariya
Yaksh Bariya23 часов назад

Lemme see what embridge is, and if I can recreate it. Anyways when you publish the writing, do let me know

Фото профиля Underdog
Underdog1 день назад

Saini sahab on top

Фото профиля Soham
Soham1 день назад

Which rhel? We are running rhel 8 and 9 in our org

Фото профиля Salman Asad ⚡
Salman Asad ⚡14 часов назад

🔥

Фото профиля jyotishbaba
jyotishbaba23 часов назад

patal lok

Похожие видео

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.
12:44

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

37,025 просмотров • 6 месяцев назад

Linux is the future of operating systems.
0:57

Linux is the future of operating systems.

Ilya Miro

114,784 просмотров • 2 месяцев назад

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem
1:11

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

White Page

179,600 просмотров • 5 месяцев назад

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux
0:56

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

ilyamiro

908,100 просмотров • 2 месяцев назад

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.
20:26

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

The Lunduke Journal

21,003 просмотров • 3 месяцев назад

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.
18:30

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

The Lunduke Journal

29,825 просмотров • 2 месяцев назад

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos
2:44

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

David Bombal

29,867 просмотров • 7 месяцев назад

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL
0:28

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat

21,270 просмотров • 2 лет назад

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services
1:33

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 просмотров • 24 дней назад

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.
14:07

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

The Lunduke Journal

117,419 просмотров • 8 месяцев назад

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos
5:23

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

TechMakesArt

74,800 просмотров • 1 год назад

Kali Linux Installation. (4 Minutes guide)
3:59

Kali Linux Installation. (4 Minutes guide)

Oluwatobi Mustapha

88,144 просмотров • 1 год назад

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.
13:03

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

The Lunduke Journal

349,545 просмотров • 8 месяцев назад

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.
16:18

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

The Lunduke Journal

30,143 просмотров • 6 месяцев назад

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software
1:57

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

Coding with Lewis

25,400 просмотров • 1 месяц назад

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.
12:58

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

The Lunduke Journal

13,879 просмотров • 6 месяцев назад

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource
1:42

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

vallarine99

10,300 просмотров • 2 месяцев назад

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct
1:06

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

eNCA

62,703 просмотров • 1 год назад

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,567 просмотров • 4 месяцев назад