正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Unauthenticated remote root CA installation via eMudhra emBridge 3.3.1.0 (drive-by to TLS MITM) on RHEL-family Linux operating systems

Karan Saini

4,514 subscribers

18,925 次观看 • 1 天前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

11 条评论

nisarga 的头像

nisarga1 天前

banger after banger

Karan Saini 的头像

Karan Saini1 天前

thx boss ;-)

Nevidium 的头像

Nevidium1 天前

looks like you will take down their rest of the business too!! Thanks for exposing these liars

Lane Henslee 的头像

Lane Henslee1 天前

eMudhra sells certificates for a living, and emBridge lets any website install its own root CA for free

Sumith 的头像

Sumith1 天前

Same as CVE-2026-125659 ?

Karan Saini 的头像

Karan Saini1 天前

No, different bug, affects the latest build

Yaksh Bariya 的头像

Yaksh Bariya23 小时前

Lemme see what embridge is, and if I can recreate it. Anyways when you publish the writing, do let me know

Underdog 的头像

Underdog1 天前

Saini sahab on top

Soham 的头像

Soham1 天前

Which rhel? We are running rhel 8 and 9 in our org

Salman Asad ⚡ 的头像

Salman Asad ⚡14 小时前

🔥

jyotishbaba 的头像

jyotishbaba23 小时前

patal lok

相关视频

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

37,025 次观看 • 6 个月前

Linux is the future of operating systems.

Linux is the future of operating systems.

Ilya Miro

114,784 次观看 • 2 个月前

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

Every Hidden Advantage of Operating Systems Explained (Linux) #linux #hiddenadvantage #viewsproblem

White Page

179,600 次观看 • 5 个月前

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

Linux is the future of operating systems. #linux #techtok #desktop #ui #archlinux

ilyamiro

908,100 次观看 • 2 个月前

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

Operating System Age Verification Bill Signed Into Law in Illinois HB-5511, which will require Age data collection on all Operating Systems (including Linux, FreeBSD, and others), was signed by Governor Pritzker.

The Lunduke Journal

21,003 次观看 • 3 个月前

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

Mac, Windows, & Linux Are ALL Developed By AI Now Most major Operating Systems now coded by AI, & that rate is accelerating. The number of AI code submissions to Linux doubled in the last week alone.

The Lunduke Journal

29,825 次观看 • 2 个月前

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

WARNING: Linux Age Checks Age verification laws are hitting operating systems like Linux and Graphene OS. Are your digital privacy rights slipping away? Let me know your thoughts on this controversial systemd update! #linux #ageverification #grapheneos

David Bombal

29,867 次观看 • 7 个月前

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat Enterprise Linux #AI is now available across the hybrid cloud. Build AI your way: #RHEL

Red Hat

21,270 次观看 • 2 年前

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

Security recap from the last 24 hours that actually matters. - PHP, 2 CVEs - Node.js, 10 CVEs - SSL, 8 eMudhra intermediate certificates compromised - GitLab self-managed, 1 CVE rated 10.0 What's the problem? PHP - CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 - Unauthenticated remote code execution in the PHP runtime itself - Every PHP site serving web requests is affected, so WordPress, Laravel and Drupal too - Exploit attempts are already being reported Fixing PHP Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older get no official fix. Node.js - 4 High, 3 Medium, 3 Low - A brotli decoder bug that can lead to remote code execution - TLS hostname checks that can be bypassed with oddly written IP addresses - dns.resolve breaking on names with null bytes Fixing Node.js Upgrade to 22.23.4, 24.22.1 or 26.12.1. EOL versions stay vulnerable. eMudhra - 8 intermediate certificates from this CA were compromised - That means someone could forge HTTPS certificates - Browsers already block them, but Node apps, containers, VPNs and CI keep trusting them until you update Fixing eMudhra Update Node, Go, your OS CA bundle and your container base images. If your site uses an emSign certificate, get a new one. GitLab self-managed - CVE-2026-110264, CVSS 10.0, unauthenticated remote code execution - Fix is 19.5.1 plus backports. is already patched. So, have you upgraded and patched? If not, better talk to your team today. These are serious because the impact can be - Attackers running code on your server without logging in - Leaked user data and secrets - Fake HTTPS certificates silently accepted by your backend services

λL-D1 | AI for Buzzer 🍉

42,278 次观看 • 24 天前

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

California Law to Require Linux, Windows Implement Age Verification by Jan 1, 2027 A new California Law (AB-1043), signed by Governor Gavin Newsom, requires all Operating Systems (from macOS to FreeBSD) to implement age verification, at the system level, this year.

The Lunduke Journal

117,419 次观看 • 8 个月前

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

Linux Mac?! This is Mac themed Linux installation video! What would you like to see next?! #techmakesart #computernerd #homelab #linux #elementaryos

TechMakesArt

74,800 次观看 • 1 年前

Kali Linux Installation. (4 Minutes guide)

Kali Linux Installation. (4 Minutes guide)

Oluwatobi Mustapha

88,144 次观看 • 1 年前

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

Democrats Introduce Bill to Require Age Verification on Linux, Windows "Age Attestation on Computing Devices" (Colorado State Bill 26-051) would require age verification on all Operating Systems (both Open Source and proprietary), with fines for violations.

The Lunduke Journal

349,545 次观看 • 8 个月前

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

Illinois Operating System Age Verification Law Passes House, Moves to Senate Illinois HB 5511, which would require all Operating Systems (Linux, Windows, etc.) to include Age Verification, is moving closer to becoming law. And it's a really WEIRD one.

The Lunduke Journal

30,143 次观看 • 6 个月前

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

This is one of the most controversial operating systems to ever exist. Omarchy is currently gathering huge buzz, specifically for its founder #linux #omarchy #software

Coding with Lewis

25,400 次观看 • 1 个月前

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

Who's driving Age Verification in Operating Systems (Windows, Linux, etc.)? In the USA, it's Facebook. In Canada, it's... a porn company. Seriously.

The Lunduke Journal

13,879 次观看 • 6 个月前

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

Arch Linux: The Minimalist Linux Distribution Built for Users Who Want Complete Control, Featuring a Rolling-Release Model, Powerful Customization, and a Legendary Learning Curve That Makes You Build the System Your Way 🐧💻 | Arch Linux, Linux, Customization, Open Source, Operating Systems #ArchLinux #Linux #LinuxDistro #TechExplained #OpenSource

vallarine99

10,300 次观看 • 2 个月前

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

Eskom has scrapped the requirement for an engineer to sign off on the systems. Rooftop solar users are now only required to have their systems approved by professionals registered with the Labour Department. These include Installation Electricians and Master Installation Electricians. #DStv403 #DStv194 #TheSouthAfricanMorning #QuestionThinkAct

eNCA

62,703 次观看 • 1 年前

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,567 次观看 • 4 个月前