CVE-2026-106435

The MongoDB Python Driver contains an out-of-bounds read vulnerability in its binary accelerator. This occurs when an application decodes malformed BSON containing a truncated regular-expression element missing a trailing NUL byte. An attacker who can supply BSON to the decode or decode_all APIs ...

Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

libbtbb

libbtbb ======= これは、GR-BluetoothプロジェクトからフォークされたBluetoothベースバンド復号ライブラリです。Ubertoothデバイスだけでなく、GR-Bluetooth/USRPからもBluetoothパケットおよびピコネット情報を抽出するために使用できます。 このコードは未完成であり、現在も活発に開発中です。パッチやバグ報告はGitHubのバグトラッカーに提出してください: https://github.com/greatscottgadgets/libbtbb/issues...

exploit-CVE-2020-5844

CVE-2020-5844 Pandora FMS v7.0NG.742 익스플로잇 - 원격 코드 실행 이 저장소가 마음에 드시나요? ⭐를 눌러주세요! 교육 및 승인된 보안 연구 목적으로만 사용하십시오. 익스플로잇 작성자 @UNICORDev 작성자: @NicPWNs 및 @Dev-Yeoj 취약점 설명 Pandora FMS v7.0 NG의 index.php?sec=godmode/extensions&sec2=extensions/filesrepo는 인증된 관리자가 악성 PHP 스크립트를 업로드하고, 파일 위치의 base64 디코딩을 통해 실...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve によるディレクトリ保護バイパス → PUT ベースの RCE🚨🚨 概要 CVE-2025-55752 は、Apache Tomcat においてバグ 60013 の修正中に導入されたセキュリティリグレッションです。Rewrite Valve が使用されている場合、Tomcat は URL デコード の前に パス正規化 を適用します。この誤った順序により、StandardContextValve.java で実装されている /WEB-INF/ や /META-INF/...

AZL-106860 CVE-2026-107298 affecting package msgpack 3.3.0-1

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

CVE-2026-107298

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

EUVD-2026-95109

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can provide MessagePack input to submit deeply nested containers that exhaust the JavaScript call stack and interrupt a...

SpookySSL-Scanner

SpookySSL-Scanner Windows, Linux, macOS 용 SpookySSL CVE-2022-3602 SSLv3 Scanner 터키어 취약점은 어떻게 발생하나요? 먼저 문제는 바이트 크기를 결정할 때 발생합니다. 바이트 크기를 결정할 때 NULL, 즉 빈/0 값이 정의되지 않아 바이트 길이가 0으로 설정될 수 있습니다. 아래 명령어에서 xn--으로 시작하는 부분은 다른 알파벳예: 중국어에서 punycode로 변환된으로 쓰인 도메인 이름을 라틴 알파벳으로 변환하는 것을 의미합니다. If 루프 내에서 memcpy...

Rom-0-Decoder

このリポジトリには README がありません。...

CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 CVE-2025-29632 で対象となる脆弱性の情報 影響を受けるバージョン: 4.0.0 およびそれ以前のバージョン free5gc が InitialUEMessage を処理する際、nASPDU 参照が nil であるか（つまりヌルポインタであるか）どうかのみをチェックし、nASPDU の内容が空であるかどうかは検証しません。その結果、後続のメッセージ解析で nassecurity.DecodePlainNasNoIntegrityChecknASPDU.Value...

CVE-2026-44034

A flaw was found in DCMTK. A heap-based out-of-bounds read vulnerability occurs in the frame decoding routine due to missing length validation on image data fragments. By enticing a user or application to process a specially crafted Run-Length Encoded RLE DICOM file, an attacker could trigger an...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

BeaconEye

BeaconEye 소개 BeaconEye는 실행 중인 프로세스에서 활성화된 CobaltStrike 비콘을 스캔합니다. 프로세스가 비콘을 실행 중인 것으로 확인되면 BeaconEye는 각 프로세스의 C2 활동을 모니터링합니다. 작동 방식 BeaconEye는 라이브 프로세스 또는 MiniDump 파일에서 의심되는 CobaltStrike 비콘을 스캔합니다. 라이브 프로세스 모드에서는 선택적으로 디버거로 연결되어 C2 트래픽현재 HTTP/HTTPS 비콘 지원에 대한 비콘 활동 모니터링을 시작합니다. C2 데이터 및 malleable...

CVE-2025-55182-exploit

CVE-2025-55182 エクスプロイト このリポジトリには、React Server Components における重大なリモートコード実行（RCE）脆弱性である CVE-2025-55182 用のシンプルなエクスプロイトが含まれています。 脆弱性の概要 CVE-2025-55182 は、React Server Components における認証不要のリモートコード実行脆弱性です（CVSS 10.0）。この脆弱性は、React が React Server Function エンドポイントに送信されたペイロードをデコードする方法に影響を及ぼし、攻撃者が悪意のある HTTP...

LTESniffer

LTESniffer - オープンソースのLTEダウンリンク/アップリンク盗聴ツール LTESniffer は、オープンソースのLTEダウンリンク/アップリンク盗聴ツールです。 まず、物理ダウンリンク制御チャネル（PDCCH）を復号し、すべてのアクティブユーザーのダウンリンク制御情報（DCI）と無線ネットワーク一時識別子（RNTI）を取得します。復号したDCIとRNTIを使用して、LTESnifferはさらに物理ダウンリンク共有チャネル（PDSCH）と物理アップリンク共有チャネル（PUSCH）を復号し、アップリンクおよびダウンリンクのデータトラフィックを取得します。...

CVE-2026-107580

Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote unauthenticated attacker to make the IMAP, SMTP and POP3 services, or the webmail, unavailable by sending a message. The server unfolded a decoded heade...

EUVD-2026-94862

Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote unauthenticated attacker to make the IMAP, SMTP and POP3 services, or the webmail, unavailable by sending a message. The server unfolded a decoded heade...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf 요약: 일부 OPC UA 스택은 특수하게 조작된 요청을 디코딩할 때 스택 오버플로우에 취약합니다. 빌드 mvn clean package 실행 java -jar target/stack-overflow-poc.jar...