CVE-2026-55857

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55856

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

GHSA-G9JJ-CGMH-9F38 MariaDB has cleartext password disclosure to a MITM on the initial-handshake

Summary When a Java application connects with sslMode=verify-full or verify-ca and a password but does not pin a server certificate, Connector/J deliberately accepts an untrusted/self-signed certificate at the TLS layer the "MITM-proof without a CA" feature and proves the server's identity...

EUVD-2026-68019

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

CVE-2026-55856 MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

CVE-2025-36290

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-64649

IBM Concert versions 1.0.0 through 2.3.1 are affected by improper certificate validation , allowing a remote attacker to perform unauthorized actions via man-in-the-middle techniques. The vulnerability carries a CVSS 3.1 score of 5.9 (MEDIUM) with a high attack complexity, no privileges required,...

ldap-swak

LDAP Swiss Army Knife Многофункциональная утилита для LDAP-сервера. Быстрая настройка LDAP-сервера для тестовых целей, MitM-прокси для перехвата открытого текста или пересылки учетных данных NTLM, а также эксплуатация различных уязвимостей Java JNDI/LDAP-клиентов. Автор: Moritz Bechler...

CVE-2025-36290 IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36290

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

Summary When SSL/TLS is enabled but no CA / server certificate is provided, the connector verifies the server's identity using fingerprint validation. The check is effective, the connection is ultimately rejected when it fails, but it happens after the authentication exchange. As a result, the...

NPM: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

NPM: MariaDB's connector leaks the cleartext password to an MitM despite ssl: true vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.4...

CVE-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

qyvora-toha3ee

toha3ee Um framework de avaliação de segurança local e de rede escrito em Go. É uma ferramenta de pesquisa e teste de penetração autorizado que cobre o pipeline de avaliação de rede — descoberta de hosts e serviços, enumeração, auditoria de credenciais, identificação de vulnerabilidades e...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

arpy

Arpy Arpy è uno strumento MiTM per Mac facile da usare per lo spoofing ARP. Offre 3 funzionalità mirate: Sniffing di pacchetti Domini visitati Domini visitati con Gource Ciascuna funzione verrà spiegata di seguito. Sistemi operativi testati ad oggi Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac O...

bettercap

This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...

WiFi-Pumpkin-deprecated

Questo repository è ⛔️ DEPRECATO, wifipumpkin3 è stato rilasciato, dacci un'occhiata! WiFi-Pumpkin - Framework per attacchi Rogue Wi-Fi Access Point Descrizione WiFi-Pumpkin è un framework per creare facilmente falsi AP Rogue che inoltrano il traffico legittimo verso e dalla vittima ignara. È ricc...

MITMf

MITMf Framework per attacchi Man-In-The-Middle Questo progetto non viene più aggiornato. MITMf è stato scritto per soddisfare la necessità, all'epoca, di uno strumento moderno per eseguire attacchi Man-In-The-Middle. Da allora molti altri strumenti sono stati creati per colmare questo spazio,...

ssh-mitm

SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Übersicht Dieses Penetrationstest-Werkzeug ermöglicht es einem Auditor, SSH-Verbindungen abzufangen. Ein Patch auf den OpenSSH v7.5p1-Quellcode bewirkt, dass dieser als Proxy zwischen dem Opfer und dessen beabsichtigtem SSH-Server fungiert; alle...