CVE-2026-107819

A flaw was found in MariaDB Connector/C. During automatic Transport Layer Security TLS connection setup, the library verifies certificate trust but fails to confirm that the server hostname matches the certificate before switching authentication methods. An active man-in-the-middle MitM attacker...

CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...

CVE-2026-107819

The MariaDB Connector/C library, specifically the libmariadb component, is vulnerable in versions 3.4.1 through 3.4.10 . The Zero-Configuration SSL authentication-switch logic fails to reject TLS hostname verification mismatches before selecting a non-hashing authentication plugin. This flaw allo...

EUVD-2026-95920

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...

CVE-2026-108105

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-108105 Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-108105

The Open5GS software (versions through 2.8.0 ) is vulnerable to a reachable assertion vulnerability within the mme_gn_handle_sgsn_context_request() function. A remote unauthenticated attacker can exploit this by sending malformed SGSN Address IEs via GTPv1-C traffic from a configured SGSN address...

EUVD-2026-95795

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-106428

A flaw was found in the MongoDB C Driver. An out-of-bounds read occurs when the driver parses malformed responses during Salted Challenge Response Authentication Mechanism SCRAM authentication. A malicious server or network intermediary can exploit this flaw by sending a crafted response before...

CVE-2026-106438

A flaw was found in the MongoDB C Driver. This vulnerability allows an attacker to compromise data integrity by causing an application to store or process incorrect numeric values. Due to a calculation error during Decimal128 string parsing, the driver accepts certain over-precision numbers with...

CVE-2026-106437

A flaw was found in mongo-c-driver. An attacker who can influence the buffer length supplied by an embedding application can trigger an integer underflow by passing an undersized value to the Binary JSON BSON buffer-reservation function. This issue leads to out-of-bounds memory reads and writes...

CVE-2026-106431

A flaw was found in mongo-c-driver. An off-by-one error in the BSON bulk document writer allows an attacker to cause a Denial of Service DoS or memory corruption. By supplying documents of a specific cumulative size that align with a buffer boundary, an attacker can trigger a single-byte...

slides

diapositives Hack Different : Pwning iOS 14 avec les bugz de la génération Z BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong article enregistrement parodie See No Eval : Exécution dynamique de code au runtime en Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape : Pwning...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Utilitaire de manipulation d'octets bruts, capable d'appliquer des transformations connues et moins connues, de faire des recherches binaires rapides, de l'interception de proxy réseau et plus encore. Installation sur Windows: Téléchargez...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

Obfusk8

Obfusk8 : Bibliothèque d'obfuscation basée sur C++17 Obfusk8 est une bibliothèque légère, uniquement en-tête, conçue pour le C++17, destinée à renforcer considérablement l'obfuscation de vos applications, rendant la rétro-ingénierie nettement plus ardue. Elle y parvient grâce à un ensemble varié ...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

SessionHop

SessionHop SessionHop est un outil C qui utilise l'objet COM IHxHelpPaneServer, configuré pour s'exécuter en tant qu'Utilisateur interactif, afin de détourner des sessions utilisateur spécifiées. En créant un moniker de session et en utilisant l'interface Execute de l'objet COM, les opérateurs...

CVE-2021-36934

CVE-2021-36934 Implémentation en C de CVE-2021-36934 également appelé HiveNightmare/SeriousSAM avec un analyseur intégré...

SharpPN

C PrintNightmare CVE-2021-1675 Vous aurez besoin d'une DLL pour utiliser SharpPN. Une fois que vous l'avez, compilez et spécifiez le chemin de la DLL dans les arguments de la ligne de commande. Compilation Vous pouvez compiler vous-même avec C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe...