informer

Informer - Telegram Mass Surveillance Update 10-20-2025 Security : Fixed high-severity vulnerability CVE-2022-1941 in mysql-connector-python Security : Migrated from deprecated oauth2client to google-auth Updated all dependencies to latest secure versions Fixed quickstart.sh script bugs venv...

CVE-2026-101804

A flaw was found in MySQL Connector/ODBC. An unauthenticated attacker with local logon access to the host infrastructure, with the assistance of user interaction, can exploit this vulnerability to disrupt service operations. A successful attack allows the adversary to cause a partial Denial of...

CVE-2026-101806

A flaw was found in mysql-connector-odbc. Under specific conditions, a low-privileged attacker with network access can exploit this vulnerability to compromise database connections. Successful exploitation allows an attacker to gain unauthorized read, modification, or deletion access to sensitive...

CVE-2026-101768

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker with network access via Hypertext Transfer Protocol HTTP could exploit this vulnerability to compromise the host application process. A successful attack allows the attacker to take over the application process, potentially...

CVE-2026-101626

A flaw was found in MySQL Connector/Net. This vulnerability may allow an unauthenticated remote attacker with network access to cause unauthorized information disclosure. Under complex conditions, successful exploitation can result in unauthorized access to critical data handled by the connector...

CVE-2026-101625

A flaw was found in MySQL Connector/Net. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to interact with a malicious request across the network. Successful exploitation allows the attacker to obtain unauthorized read access to a subset of data accessible ...

CVE-2026-101678

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability across the network by enticing a user to interact with malicious requests. A successful attack allows the attacker to cause a partial Denial of Service DoS, leading to temporary service...

CVE-2026-101677

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to interact with a malicious service across the network. A successful attack can result in unauthorized modification, insertion, or deletion of accessible data...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...

Linux Distros Unpatched Vulnerability : CVE-2026-101768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficult to exploit...

cash.atto:commons-test-jvm (>=8.0.1, <=8.0.2), cat.freya:alloy (>=0.1.0, <=0.1.1) +105 more potentially affected by CVE-2026-101768 via com.mysql:mysql-connector-j (26.7.0)

com.mysql:mysql-connector-j MAVEN version 26.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.mysql:mysql-connector-j and may be impacted: - cash.atto:commons-test-jvm =8.0.1, =0.1.0, =2026.33.1, =1.30.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0,...

cash.atto:commons-test-jvm (>=8.0.1, <=8.0.2), cat.freya:alloy (>=0.1.0, <=0.1.1) +105 more potentially affected by CVE-2026-101678 via com.mysql:mysql-connector-j (26.7.0)

com.mysql:mysql-connector-j MAVEN version 26.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.mysql:mysql-connector-j and may be impacted: - cash.atto:commons-test-jvm =8.0.1, =0.1.0, =2026.33.1, =1.30.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0,...

Oracle MySQL Connectors: Permissions management and access control issues

The Oracle MySQL Connector version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Connector/Net component. Unauthenticated attackers can gain network access through various protocols, potentially leading to...

python313-mysql-connector-python-9.7.0-1.2 on GA media (moderate)

python313-mysql-connector-python-9.7.0-1.2 on GA media Announcement ID: openSUSE-SU-2026:12019-1 Rating: moderate Cross-References: CVE-2016-5598 CVE-2019-2435 CVE-2024-21272 CVSS scores: CVE-2019-2435 SUSE : 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed ...

OPENSUSE-SU-2026:12019-1 python313-mysql-connector-python-9.7.0-1.2 on GA media

These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed...

PT-2026-105728

These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091360 advisory. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property f...

CVE-2026-71084

A flaw was found in mysql-connector-odbc. An unauthenticated attacker with local logon access to the infrastructure where MySQL Connectors executes can exploit this vulnerability. This can lead to a complete denial of service DoS by causing the component to crash repeatedly. Additionally, the...