CVE-2026-107819

A flaw was found in MariaDB Connector/C. During automatic Transport Layer Security TLS connection setup, the library verifies certificate trust but fails to confirm that the server hostname matches the certificate before switching authentication methods. An active man-in-the-middle MitM attacker...

CVE-2026-107819

The MariaDB Connector/C library, specifically the libmariadb component, is vulnerable in versions 3.4.1 through 3.4.10 . The Zero-Configuration SSL authentication-switch logic fails to reject TLS hostname verification mismatches before selecting a non-hashing authentication plugin. This flaw allo...

CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...

EUVD-2026-95920

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...

CVE-2026-108105

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-108105

The Open5GS software (versions through 2.8.0 ) is vulnerable to a reachable assertion vulnerability within the mme_gn_handle_sgsn_context_request() function. A remote unauthenticated attacker can exploit this by sending malformed SGSN Address IEs via GTPv1-C traffic from a configured SGSN address...

EUVD-2026-95795

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-106428

A flaw was found in the MongoDB C Driver. An out-of-bounds read occurs when the driver parses malformed responses during Salted Challenge Response Authentication Mechanism SCRAM authentication. A malicious server or network intermediary can exploit this flaw by sending a crafted response before...

CVE-2026-106438

A flaw was found in the MongoDB C Driver. This vulnerability allows an attacker to compromise data integrity by causing an application to store or process incorrect numeric values. Due to a calculation error during Decimal128 string parsing, the driver accepts certain over-precision numbers with...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2026-106431

A flaw was found in mongo-c-driver. An off-by-one error in the BSON bulk document writer allows an attacker to cause a Denial of Service DoS or memory corruption. By supplying documents of a specific cumulative size that align with a buffer boundary, an attacker can trigger a single-byte...

slides

슬라이드 다르게 해킹하기: Z세대 버그로 iOS 14 제압하기 BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 백서 녹화 패러디 Eval은 보지 마: Objective-C 런타임 동적 코드 실행 RWCTF 2021 Zhi Zhou@CodeColorist 크로스 사이트 탈출: 특이한 방법으로 macOS Safari 샌드박스 제압하기 BlackHat EU 2020 Zhi Zhou@CodeColorist 난 자유로워지고 싶어: 특이한 로직 Safari 샌드박스 탈출...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

pip3line

Pip3line Codacy Badge Сборки для Linux / MacOS Сборки для Windows Утилита для манипуляции сырыми байтами, способная применять как хорошо известные, так и менее известные преобразования, быстрый бинарный поиск, перехват прокси-трафика и многое другое. Установка на Windows: Скачайте релизный zip...

Obfusk8

Obfusk8: Библиотека обфускации на C++17 Obfusk8 — это легкая, header-only библиотека на C++17, предназначенная для значительного усиления обфускации ваших приложений, что делает обратную разработку значительно более сложной задачей. Она достигает этого с помощью разнообразных методов во время...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

SessionHop

SessionHop SessionHop — это инструмент на C, который использует COM-объект IHxHelpPaneServer, настроенный на запуск как Интерактивный пользователь, для перехвата указанных сеансов пользователей. Создавая моникер сеанса и используя интерфейс Execute COM-объекта, операторы могут запускать...

CVE-2021-36934

CVE-2021-36934 C реализация CVE-2021-36934 также известного как HiveNightmare/SeriousSAM со встроенным парсером...

SharpPN

C PrintNightmare CVE-2021-1675 SharpPN을 사용하려면 DLL이 필요합니다. DLL을 준비한 후 빌드하고 명령줄 인수에 DLL 경로를 지정하면 됩니다. 빌드 C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe -out:SharpPN.exe C:\Path\to\Program.cs 명령으로 직접 빌드하거나, Visual Studio에서 .sln 파일을 열어 빌드할 수 있습니다. 사용법 .\SharpPN.exe -DLL C:\path\to\your\dll 참고 자료...