EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

magisk-renef

MagiskRenef Android용 동적 계측 툴킷인 renef를 자동으로 패키징하고 실행하는 Magisk / KernelSU / APatch 모듈입니다. magisk-frida에서 영감을 받았습니다. 요구 사항 루팅된 Android 기기 Magisk / KernelSU / KernelSU Next / APatch ARM64만 지원 — renef는 ARM64 Android만 지원합니다 Android 10 이상 권장 설치 1. Releases에서 최신 MagiskRenef-version.zip을 다운로드하세요. 2. 루트...

refreshing-mcp-tool

아직 완성되거나 준비된 상태는 아니지만, 코드를 커밋해 두고 싶었다. 이 도구는 기본적으로 UNIX 도메인 소켓을 통해 동작하는 F5의 데이터베이스 프로토콜인 "mcp"를 구현한다. 즉, 이러한 도구를 사용하려면 먼저 F5 장치에서 셸을 확보해야 한다. 일반적으로 스크립트의 출력을 socat을 사용하여 /var/run/mcp로 전달한 다음, 응답을 mcp-parser.rb에 입력하면 된다. 자세한 내용은 아래를 참고하라. 스크립트에 대한 간단한 요약: mcp-getloot.rb - 사용자와 변수를 덤프하는 메시지를 생성한다...

CVE-2021-25461

CVE-2021-25461 이 저장소는 EuroS&P 2022에 채택된 SAUSAGEAndroid에서 유닉스 도메인 소켓 사용에 대한 보안 분석 논문에서 발견된 CVE에 대한 개념 증명PoC을 포함하고 있습니다. 이 논문은 취약점을 발견하고 개념 증명을 작성한 Mounir Elgharabawy와 함께 작업했습니다. 그의 CVE 저장소는 여기에서 확인할 수 있습니다. 모든 세부 사항은 이 저장소에 있는 .sh 파일에서 확인할 수 있습니다...

tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition

A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...

CVE-2026-21636

CVE-2026-21636 - Node.js 권한 모델 UDS/네트워크 우회 취약점 요약 Node.js 권한 모델--permission은 파일시스템, 자식 프로세스, 워커, 네트워크에 대한 접근을 제한하여 프로세스를 샌드박싱하도록 설계되었습니다. CVE-2026-21636 은 undici/fetch및 net/tls를 통해 Unix 도메인 소켓 과 로컬 TCP 주소로 이루어지는 연결이 --allow-net이 없더라도 네트워크 가드를 완전히 우회한다는 것을 밝혀냅니다. 영향: Node.js v25 공개 시점 기준 네트워크 권한은...

tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition

A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...

AlmaLinux 9.2 [TuxCare] Security Update: p11-kit / p11-kit-devel / p11-kit-server / p11-kit-trust (ALMALINUX9.2:CLSA-2026:1788357425)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788357425 advisory. - A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue...

AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788353293)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788353293 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constrain...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in p11-kit

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in p11-kit in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey function on a remote token with...

SUSE CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

Linux Distros Unpatched Vulnerability : CVE-2026-96747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in .sock as a local Unix domain...

DEBIAN-CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

AZL-105113 CVE-2026-96747 affecting package python-pymongo 4.2.0-9

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747

A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...

CVE-2026-96747

The MongoDB Python Driver client-side field level encryption support contains a vulnerability where a key management endpoint ending in .sock is incorrectly treated as a local Unix domain socket path instead of a remote host. An attacker with write access to encryption key metadata in the databas...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

PT-2026-98231

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description Client-side field level encryption support may incorrectly interpret a key management endpoint value ending in ".sock" as a local Unix domain socket path instead of a remote hos...