305 matches found
Ascii-And-Sub-Encoder
ASCII And/Sub Encoder This tool has been created while i was preparing for the offensive security CTP course leading to legacy OSCE certification. The tool generates nasm friendly assembly instructions of a customized Ascii Subtraction Encoder. The development of this tool is based on the...
CVE-2026-119281
A flaw was found in MariaDB Connector/J. The database connector fails to properly validate changes to the result character set and incorrectly assumes all returned data is UTF-8 encoded. A malicious database server or an attacker intercepting network communication a machine-in-the-middle attacker...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-12670)
Summary IBM MQ has addressed a denial of service vulnerability Vulnerability Details CVEID:CVE-2026-12670 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set...
PT-2026-132839
Name of the Vulnerable Software and Affected Versions MariaDB Connector/J versions 3.0.0 through 3.3.6 MariaDB Connector/J versions 3.4.0 through 3.4.4 MariaDB Connector/J versions 3.5.0 through 3.5.10 Description The connector assumes result bytes are UTF-8 but only guards changes to character s...
Security Bulletin: IBM MQ Appliance is affected by an improper conversion vulnerability (CVE-2026-12670)
Summary IBM MQ Appliance has addressed an improper conversion vulnerability that could allow an authenticated attacker to cause a denial of service through a specially crafted message during character set conversion. Vulnerability Details CVEID:CVE-2026-12670 DESCRIPTION: IBM MQ could allow an...
CVE-2026-12670
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
CVE-2026-12670 IBM MQ Denial of Service
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
CVE-2026-12670 IBM MQ Denial of Service
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
CVE-2026-12670
IBM MQ is vulnerable to a Denial of Service (DoS) condition. An authenticated attacker can trigger this by sending a specially crafted message that causes excessive memory operations during character set conversion . No specific patch versions or exploit details are provided in the documents.
EUVD-2026-104462
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
Astra Linux – vulnerability in mariadb
The MariaDB server is a community-developed fork of the MySQL server. In versions 3.3.18 and 3.4.8, an application that accepted unvalidated user input, escaped it using mysqlrealescapestring, and sent it to the database via the text protocol and the big5 character set was vulnerable to SQL...
CVE-2026-12670: Incorrect Conversion between Numeric Types
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
PT-2026-117514
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion...
IBM MQ Operator numerical error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
Important: Red Hat Security Advisory: mariadb-connector-c security update
An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: mariadb-connector-c security update
An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
Important: Red Hat Security Advisory: mariadb-connector-c security update
An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...