android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

Android-Security-Masterclass

Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...

ToolsFx

ToolsFx English|中文 Visitors :eyes: Function Encoding wiki base64 urlBase64 base16/32/36/45/58/62/85/91/92/100 base58check UrlEncode Unicode js hex\x61/js octal\140 binary/octal/decimal/hex custom base serial dict puny code quote printable uuEncode xxEncode escape/escapeAll auto decodecrack...

CLEANSTART-2026-AL15636 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...

CVE-2026-82458 affects multiple packages. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. See references for individual vulnerabilit...

A Bootiful Podcast: Can Java be more performant than Rust? Andrew Lombardi has the numbers

Hi, Spring fans! What happens when a longtime Kotlin and JVM fan - my friend Andrew Lombardi - decides to take on the latest “rewrite everything in Rust” hype with AI in the driver’s seat? In this episode, Josh sits down with community legend Andrew Lombardi for a fast, funny, and deeply technica...

RHLW-2026-5EB0CB8050278DB4 Lightwell Security Advisory: protobuf-kotlin-lite 3.21.7.rhlw-00002

Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin-lite 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin-lite 3.21.7 from Maven Centr...

RHLW-2026-0F944E70846E7603 Lightwell Security Advisory: protobuf-kotlin 3.21.7.rhlw-00002

Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin 3.21.7 from Maven Central...

CVE-2026-108714

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108714 MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108714

The MCP Kotlin SDK (versions through 0.15.0 ) is vulnerable to a memory exhaustion issue via the Application.mcpWebSocket component. The root cause is that the SDK installs Ktor WebSockets without enforcing a maxFrameSize limit. An attacker can exploit this by sending small frame headers that dec...

EUVD-2026-96988

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108714 MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108714

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

CVE-2026-108714 MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

PT-2026-110117

Name of the Vulnerable Software and Affected Versions MCP Kotlin SDK versions prior to 0.15.1 Description An uncontrolled memory allocation issue exists because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Remote clients can exploit this by sending small frame...

CVE-2026-108714: Allocation of Resources Without Limits or Throttling

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...

PT-2026-109180

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

JetBrains TeamCity < 2025.11.8 / 2026.x < 2026.1.4 / 2026.2.x < 2026.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or prior to 2026.1.4, or prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible...

CVE-2026-106218

In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...

CVE-2026-106218

JetBrains TeamCity versions prior to 2026.1.3 are vulnerable to a kotlin DSL sandbox escape (CWE-184). This flaw allows for Remote Code Execution (RCE) on the server. While the vulnerability is confirmed to exist, specific exploit details are not provided in the documents. Users should update to ...