CVE-2026-79835

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

EUVD-2026-102019

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

CVE-2026-79835 HPE Nonstop KMS Server - Buffer overflow vulnerability

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

CVE-2026-79835 HPE Nonstop KMS Server - Buffer overflow vulnerability

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

CVE-2026-79835

The HPE NonStop KMS Server is vulnerable to a buffer overflow that can be triggered by a crafted input message. This vulnerability is associated with CWE-20 (Improper Input Validation) and can lead to a Denial of Service (DoS) , memory corruption, buffer overflow, or stack overflow. The affected ...

PT-2026-114907

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

CVE-2026-79835: Improper Input Validation

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server...

HPE Nonstop KMS Server input validation error vulnerability

The HPE Nonstop KMS Server T1190L40 version contains an input validation error vulnerability caused by a buffer overflow when processing specially crafted input messages...

kms-activate

kms-activate Microsoft Windows/Office 一键激活工具 NOTE: - To u...

EUVD-2021-0871

Malware in sbrugna...

KMSpico explained: No, KMS is not "kill Microsoft"

Thanks to Pieter Arntz and the Threat Intelligence Team who contributed to the research. A hack tool is a program that allows users to activate software even without a legitimate, purchased key. Hack tools are often used to root devices in order to among others remove barriers that stop users fro...

Improper Certificate Validation in MongoDB

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20328

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20328

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20327

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

CVE-2021-20328

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20328

CVE-2021-20328 affects specific versions of the MongoDB Java driver that support Field Level Encryption (CSFLE). The root cause is improper host name verification on the KMS server’s certificate, enabling a privileged MITM attacker to intercept traffic between the Java driver and the KMS service ...

CVE-2021-20328 MongoDB Java driver client-side field level encryption not verifying KMS host name

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20328

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

CVE-2021-20328: Improper Certificate Validation

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...