Mortimer

Mortimer Una raccolta di script per l'elaborazione di dati e intelligence di tipo network forensics, principalmente in un database postgres. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato per John Green, cirt at nccgroup dot com...

RFC-Security-Research

RFC-Security-Research Original-Papier und Hilfsskripte zur Analyse von Sicherheitsaspekten von Internet-RFCs. Übersicht Dieses Repository enthält eine Überprüfung der RFC-Sicherheit im Stil eines RFC geschrieben sowie verschiedene Python-Hilfsskripte, die verwendet wurden, um die für die zugrunde...

SCOMDecrypt

SCOMDecrypt - Strumento per la decrittazione delle credenziali SCOM Pubblicato come open source da NCC Group Plc - http://www.nccgroup.trust/ Sviluppato da Richard Warren, richard punto warren chiocciola nccgroup punto trust http://www.github.com/nccgroup/SCOMDecrypt Rilasciato sotto AGPL, vedere...

thingernet-graph

thingernet-graph Python-Skript zur Erzeugung einer neo4j-Cypher-Darstellung einer Sammlung von IoT-Geräten für Visualisierung und Abfrage. Das Skript liest ein Verzeichnis von JSON-Dateien, die 'Things' beschreiben, und erzeugt den relevanten neo4j-Cypher-Text für den Import in neo4j, um eine...

DEBIAN-CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

DEBIAN-CVE-2026-81521

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

CVE-2026-81521

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

DEBIAN-CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

litellm-sqli-scanner

LiteLLM SQL Injection Scanner CVE-2026-42208 — SQL injection nel LiteLLM Proxy Rileva e convalida CVE-2026-42208: vulnerabilità di SQL injection nel livello del database di LiteLLM Proxy. Solo per test di sicurezza autorizzati. Funzionalità Rilevamento di SQL injection CVE-2026-42208 Fingerprinti...

CVE-2022-31890

CVE-2022-31890 per osTicket | Sistema di ticketing per il supporto Soprannome: root@kitploit: python nickname.py The output of the first nickname in the table. Password: root@kitploit: python password.py The output of the first password in the table. Output su file: root@kitploit: python...

forensic-msvpn

Forensische Analyse von Microsoft Remote Access VPN Dieses Repository enthält Ressourcen im Zusammenhang mit der forensischen Analyse von Microsoft Remote Access VPN, die in diesem Blogbeitrag verfügbar ist:...

iOSForensic

iOSForensic iosForensic ist ein Python-Tool zur Unterstützung bei forensischen Analysen auf iOS. Es sammelt Dateien, Logs, extrahiert sqlite3-Datenbanken und dekomprimiert .plist-Dateien in XML. Installation Klonen Sie einfach dieses Git-Repository und installieren Sie die Abhängigkeiten...

CVE-2026-81526

The MongoDB Rust Driver fails to neutralize special characters in a caller-supplied target identifier before embedding it in requests sent to the server. Per the CVELIST entry, the specific root cause is an unvalidated dotted database name in bulk write namespaces , allowing an attacker with low ...

Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...