CVE-2019-9053

CVE-2019-9053 CVE-2019-9053 استغلال لـ Python 3 آخر اختبار: 28-12-2021 تم الاختبار على: Python 3.10.1 مصدر الاستغلال الأصلي: https://www.exploit-db.com/exploits/46635 يتحمل المستخدمون المسؤولية الكاملة عن أي إجراءات يتم تنفيذها باستخدام هذه الأداة. إذا لم تكن هذه الشروط مقبولة لديك، فلا تستخدم هذ...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2025-13780

CVE-2025-13780 : Scanner RCE pour pgAdmin 4 = 8.14 Un scanner de vulnérabilités complet pour CVE-2025-13780 , une vulnérabilité d'exécution de code à distance RCE dans pgAdmin 4 versions ≤ 8.14. 🔍 Détails de la vulnérabilité La vulnérabilité se trouve dans la fonctionnalité Restore de pgAdmin 4...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2026-55858

A flaw was found in MariaDB Connector/J, a component used to connect Java applications to MariaDB and MySQL databases. The connector incorrectly assumes a UTF-8 character set for communication, even if the database server changes its client character set to a non-UTF-8 value during a session. Thi...

CVE-2025-1094-Lab-Setup

🛠️ Configuration du laboratoire CVE-2025-1094 ⚠️ Avertissement Ce laboratoire est destiné uniquement à des fins éducatives et de recherche. N'utilisez PAS les informations ou techniques présentées ici sur des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas d'autorisation...

CVE-2021-4034

CVE-2021-4034 root@kitploit: $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Exécution de commande via le filtre de méta-commande Résumé Le filtre de méta-commande de restauration PLAIN introduit dans pgAdmin dans le cadre du correctif pour l'issue 9320 ne détecte pas les méta-commandes lorsqu'un fichier SQL commence par un Byte Order Mark UTF-8 EF BB BF ou...

Amazon Linux 2 : containerd, --advisory ALAS2ECS-2026-135 (ALASECS-2026-135)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-135 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracte...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section f...

Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ secti...

Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-134 (ALASECS-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-134 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted...

CVE-2026-55859

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

CVE-2026-55858

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

PT-2026-83375

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver encodes and decodes all character data assuming the connection character set is UTF-8. A server can announce a mid-session change to the character set client variable throu...

PT-2026-83374

Name of the Vulnerable Software and Affected Versions MariaDB Connector/J versions prior to 2.7.14 MariaDB Connector/J versions prior to 3.3.5 MariaDB Connector/J versions prior to 3.4.3 MariaDB Connector/J versions prior to 3.5.9 Description The connector encodes and decodes protocol text and...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text.

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text. CVE-2026-56852 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handli...

Astra Linux – Vulnerability in screen

In GNU Screen’s encoding.c file, as of version 4.8.0, remote attackers can cause a denial of service attack invalid write access and application crash, or potentially cause unspecified other impacts due to a crafted UTF-8 character sequence...

CVE-2026-53530

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratexparser::parse&str panics on the 9-byte input \verbéxé i.e. \verb followed by the non-ASCII delimiter é. When handling a \verb command, the parser slices the verbatim...