1187 matches found
CVE-2026-24822 a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper src modules. This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1...
CVE-2026-24822
CVE-2026-24822 is a heap-based buffer overflow/out-of-bounds write affecting the wxhelper component (src/modules) in the ttttupup project, through version 3.9.10.19-v1. The issue is tied to program file mongoose.C. The available connected sources consistently describe the vulnerability type and a...
CVE-2026-24822 a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper src modules. This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1...
CVE-2026-24822 a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper src modules. This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1...
PT-2026-4897
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper src modules. This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1...
wxhelper security vulnerability
wxhelper is a WeChat reverse-engineering tool developed by ttttupup. Versions of wxhelper 3.9.10.19-v1 and earlier contain security vulnerabilities. These vulnerabilities stem from an out-of-bound write operation and a heap-based buffer overflow vulnerability present in the program file mongoose....
CVE-2009-4530
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...
CVE-2009-4535
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...
CVE-2021-27425
Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mmmalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2025-23061
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900...
Exploit for Code Injection in Mongoosejs Mongoose
CVE-2025-23061 - Mongoose Command Injection A proof of concep...
Malicious Package
Overview database-mongoose-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-202353
Malicious code in database-mongoose-kit npm...
Malicious code in database-mongoose-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192398 Malicious code in database-mongoose-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...
CVE-2025-65502
Null pointer dereference in addcacerts in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSLCTXgetcertstore returns NULL...
VulnCheck KEV: CVE-2024-53900
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection...
EUVD-2025-198709
Null pointer dereference in addcacerts in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSLCTXgetcertstore returns NULL...
