EUVD-2025-210809

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-55860

MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb), a non-blocking Java R2DBC client for MariaDB/MySQL, is affected by a cleartext password disclosure vulnerability prior to version 1.4.1. The AuthenticationPlugin interface lacks the ability to require a secure connection, so clear-text password...

EUVD-2026-68023

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a...

CVE-2026-55860 MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a...

GHSA-QXVW-FVWX-5CP7 org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

CVE-2026-55857 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55856

MariaDB Connector/J (Java connector for MariaDB/MySQL databases) has a cleartext password disclosure vulnerability on the initial-handshake path. When an application connects with sslMode=verify-full or verify-ca, supplies a password, and does not configure serverSslCert or trustStore, the connec...

CVE-2025-68721

CVE-2025-68721: Axigen WebAdmin Gebrochene Zugriffskontrolle Zusammenfassung der Sicherheitslücke Ein Fehler in der Berechtigungslogik erlaubt es einem Administratorkonto mit null Berechtigungen , auf die Seite „Security & Filtering" zuzugreifen, insbesondere auf den Endpunkt für SSL-Zertifikate...

CVE-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

EUVD-2026-67869

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

CVE-2026-55215

MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...

CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-

CVE-2026-11109 – ब्लूटूथ क्लासिक KNOB हमला ब्लूटूथ की कुंजी वार्ता प्रोग्राम कोड पायथन सिम्युलेटेड root@kitploit: knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize: Vulnerable: accepts any...

MemorizingTrustManager

MemorizingTrustManager - Supporto cloud privato per la tua app MemorizingTrustManager MTM è un progetto per abilitare un uso più intelligente e sicuro di SSL su Android. Se incontra un certificato SSL sconosciuto, chiede all'utente se accettare il certificato una volta, permanentemente, o se...

poodle-attack-sandbox

poodle-attack-sandbox Visão Geral Este código é o código de teste para POODLE CVE-2014-3566. POODLE significa "Padding Oracle On Downgraded Legacy Encryption" e é uma vulnerabilidade no SSLv3.0. Aviso Se você usar este código para realizar um ataque, poderá ser preso pelas autoridades judiciais d...

CVE-2021-26258

Dieses Repository enthält Werkzeuge und Zusatzdateien für den CVE-2021-26258 PoC. Siehe den Blogbeitrag für Details zur Schwachstelle. Liste der Dateien : rn.stg.original: originale .stg-Datei, die mit Intel Killer geliefert wird rn.xml.original: .xml-Datei, die mit rnstg-tool aus rn.stg.original...

mitmAP

root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warnung! Dieses Projekt wird nicht mehr gewartet und funktioniert möglicherweise nicht wie erwartet. Ein Python-Programm zum Erstellen eines gefälschten AP und zum...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ssh-mitm

SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Übersicht Dieses Penetrationstest-Werkzeug ermöglicht es einem Auditor, SSH-Verbindungen abzufangen. Ein Patch auf den OpenSSH v7.5p1-Quellcode bewirkt, dass dieser als Proxy zwischen dem Opfer und dessen beabsichtigtem SSH-Server fungiert; alle...

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Ricerca Pulse Secure mitm Data di rilascio Data di rilascio congiunta con il fornitore: 26 ottobre 2020 Autore David Kierznowski, @withdk Riconoscimenti Sahil Mahajan del Pulse Secure PSIRT Team per il supporto durante il processo di divulgazione. Alyssa Herrera,...

btlejuice

BtleJuice Framework Einleitung BtleJuice ist ein vollständiges Framework zur Durchführung von Man-in-the-Middle-Angriffen auf Bluetooth Smart-Geräte auch bekannt als Bluetooth Low Energy. Es besteht aus: einem Abhörkern Interception Core einem Abhör-Proxy Interception Proxy einer dedizierten...