EUVD-2026-95237

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

CVE-2026-106436

The MongoDB PHP Driver contains a vulnerability in its BSON encoder caused by unchecked return values when a document exceeds the libbson size limit. This flaw can leave the encoder in an invalid state, allowing an unauthenticated actor to trigger a denial of service by terminating the PHP worker...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal flaw within the GIM file-upload functionality . This vulnerability allows an unauthenticated attacker to perform a traversal attack to write arbitrary files to the Collector . No specific remediation information or exploit detail...

EUVD-2026-95235

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

EUVD-2026-95168

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...

CVE-2026-84276

IBM Guardium Data Protection version 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller . An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion . This flaw ca...

EUVD-2026-95166

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is vulnerable to a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands via attacker-controlled arguments, leading to command execution with root privil...

CVE-2026-84278 IBM Guardium Data Protection Command Injection

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

EUVD-2026-95164

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHODNEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileg...

CVE-2026-84290

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are affected by a vulnerability in the WfpMonitor kernel driver component. The root cause is an improper validation of user-supplied pointers , where certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without suffi...

EUVD-2026-95163

The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An actor who can modify stored encrypted fields, such as a database writer, server, or network intermediary, can cause an affected application...

CVE-2026-106434 Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An actor who can modify stored encrypted fields, such as a database writer, server, or network intermediary, can cause an affected application...

Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An actor who can modify stored encrypted fields, such as a database writer, server, or network intermediary, can cause an affected application...

CVE-2026-106434

The MongoDB libmongocrypt explicit decryption component is vulnerable to an integrity issue where it may return an unrecognized encrypted payload unchanged rather than returning a decryption error. This occurs due to improper validation of integrity check values (CWE-354) . An actor capable of mo...

android-forensics

android-forensics AFLogical OSE: Aplicación y framework de forensia Android de código abierto La Edición de Código Abierto ha sido publicada para uso de personal no perteneciente a las fuerzas de seguridad, entusiastas de Android y gurús de la forensia por igual. Permite a un examinador extraer...

google_socks

此脚本用于允许两个套接字通过Google Drive中继数据进行通信。 查看此博客文章了解更多详情。 设置过程 安装所需的Python模块（见下文） 运行 "python2 ./googlesocks.py --setup" 并按照说明操作 创建一个Google API项目 为项目创建OAuth客户端ID凭据 下载这些凭据的JSON文件 将凭据文件移动到googlesocks目录并将其命名为"clientsecrets.json" 接着，设置脚本会给你一个Google链接并要求输入密钥 点击链接，授权脚本使用API，并获取密钥 将密钥粘贴回设置脚本的提示中...