Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Unauthenticated remote root CA installation via eMudhra emBridge 3.3.1.0 (drive-by to TLS MITM) on RHEL-family Linux operating systems

squeal's profile picture

Karan Saini

4,514 subscribers

18,925 görüntüleme • 1 gün önce •via X (Twitter)

Bilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

11 Yorum

nisarga profil fotoğrafı
nisarga1 gün önce

banger after banger

Karan Saini profil fotoğrafı
Karan Saini1 gün önce

thx boss ;-)

Nevidium profil fotoğrafı
Nevidium1 gün önce

looks like you will take down their rest of the business too!! Thanks for exposing these liars

Lane Henslee profil fotoğrafı
Lane Henslee1 gün önce

eMudhra sells certificates for a living, and emBridge lets any website install its own root CA for free

Sumith profil fotoğrafı
Sumith1 gün önce

Same as CVE-2026-125659 ?

Karan Saini profil fotoğrafı
Karan Saini1 gün önce

No, different bug, affects the latest build

Yaksh Bariya profil fotoğrafı
Yaksh Bariya23 saat önce

Lemme see what embridge is, and if I can recreate it. Anyways when you publish the writing, do let me know

Underdog profil fotoğrafı
Underdog1 gün önce

Saini sahab on top

Soham profil fotoğrafı
Soham1 gün önce

Which rhel? We are running rhel 8 and 9 in our org

Salman Asad ⚡ profil fotoğrafı
Salman Asad ⚡14 saat önce

🔥

jyotishbaba profil fotoğrafı
jyotishbaba23 saat önce

patal lok

Benzer Videolar

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.
12:44

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

37,025 görüntüleme • 6 ay önce

Linux is the future of operating systems.
0:57

Linux is the future of operating systems.

Ilya Miro

114,784 görüntüleme • 2 ay önce

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem
1:11

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

White Page

179,600 görüntüleme • 5 ay önce

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux
0:56

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

ilyamiro

908,100 görüntüleme • 2 ay önce

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.
20:26

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

The Lunduke Journal

21,003 görüntüleme • 3 ay önce

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.
18:30

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

The Lunduke Journal

29,825 görüntüleme • 2 ay önce

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos
2:44

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

David Bombal

29,867 görüntüleme • 7 ay önce

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL
0:28

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat

21,270 görüntüleme • 2 yıl önce

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services
1:33

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 görüntüleme • 24 gün önce

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.
14:07

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

The Lunduke Journal

117,419 görüntüleme • 8 ay önce

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos
5:23

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

TechMakesArt

74,800 görüntüleme • 1 yıl önce

Kali Linux Installation. (4 Minutes guide)
3:59

Kali Linux Installation. (4 Minutes guide)

Oluwatobi Mustapha

88,144 görüntüleme • 1 yıl önce

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.
13:03

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

The Lunduke Journal

349,545 görüntüleme • 8 ay önce

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.
16:18

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

The Lunduke Journal

30,143 görüntüleme • 6 ay önce

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software
1:57

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

Coding with Lewis

25,400 görüntüleme • 1 ay önce

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.
12:58

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

The Lunduke Journal

13,879 görüntüleme • 6 ay önce

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource
1:42

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

vallarine99

10,300 görüntüleme • 2 ay önce

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct
1:06

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

eNCA

62,703 görüntüleme • 1 yıl önce

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,567 görüntüleme • 4 ay önce