GHSA-5RQC-86VF-G8R2 org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...

CVE-2026-55859 MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

CVE-2026-55859

MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb) is a non-blocking Java client for MariaDB and MySQL. Prior to 1.4.1 , the driver encodes and decodes all character data assuming the connection character set is UTF-8 . A server can announce a mid-session change to character_set_client through t...

EUVD-2026-68022

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

spraygen

Spraygen पासवर्ड स्प्रेइंग के लिए पासवर्ड सूची जनरेटर - अच्छाइयों से पहले से तैयार संस्करण 1.7 महीनों, ऋतुओं, वर्षों, खेल टीमों NFL, NBA, MLB, NHL, खेल स्कोर, "पासवर्ड" और एक निर्दिष्ट आकार के पुनरावृत्त कीस्पेस के क्रमपरिवर्तन उत्पन्न करता है। सभी क्रमपरिवर्तन सामान्य विशेषताओं के साथ उत्पन्न हो...

EUVD-2026-68021

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

CVE-2026-55858

MariaDB Connector/J (org.mariadb.jdbc:mariadb-java-client) is vulnerable to a charset-confusion mismatch in versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9. The connector assumes a UTF-8 connection character set for protocol encoding/decoding and client-side escaping. If the server reports a mi...

CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

Umbrella_android

Umbrella Umbrella est une application mobile Android développée par Security First qui fournit aux défenseurs des droits humains des informations sur la conduite à tenir dans n'importe quelle situation de sécurité et les outils pour le faire. Elle permet à l'utilisateur de choisir ce qu'il veut...

CVE-2022-30190

CVE-2022-30190 Follina تطوير برمجيات خبيثة تعليمي، استغلال، تحليل وتخفيف إثبات مفهوم موثق بالكامل يوضح ثغرة Follina - بدءًا من التسليم عبر الهندسة الاجتماعية وصولًا إلى الاستغلال والتحليل الجنائي وتطوير التصحيح. ⚠️ للاستخدام التعليمي فقط. نُفذت جميع الأنشطة في هذا المستودع حصريًا داخل بيئة مختبر...

Sharpmad

Sharpmad نسخة C من Powermad هذا المشروع لم يكتمل بعد ولم يتم اختباره بالكامل. كما يفتقد إلى ما يلي: Invoke-DNSUpdate Get-KerberosAESKey قراءة مؤقتة وحدة ADIDNS Sharpmad.exe ADIDNS -Action new -Node test Action| Description ---|--- AddACE| إضافة ACE إلى العقدة. Disable| تجميد عقدة Tombstone...

Modlishka

..Modlishka.. Modlishka एक मुक्त-स्रोत पैठ परीक्षण उपकरण है जो man-in-the-middle प्रॉक्सी के रूप में कार्य करता है। इसने ब्राउज़र-आधारित HTTP ट्रैफ़िक प्रवाह को संभालने के लिए एक नया तकनीकी दृष्टिकोण प्रस्तुत किया, जो इसे क्लाइंट पर किसी अतिरिक्त प्रमाणपत्र की स्थापना की आवश्यकता के बिना, एक एकल...

GHSA-334Q-H5G3-FPXV free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

CVE-2026-55784 free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

EUVD-2026-68016

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-55784

free5GC is an open-source 5G core network implementation. In versions 1.4.4 and earlier , the AUSF component stores per-subscriber authentication state in a global sync.Map keyed only by SUPI . Because each request unconditionally replaces the active context for that SUPI, an attacker with access...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2021-21985_PoC

CVE-2021-21985 Code vulnérable CLASS/METHODs disponibles, un petit exemple à des fins de PoC : com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

iptables-essentials

أساسيات Iptables: قواعد وأوامر جدار الحماية الشائعة ☑️ مهام قيد الإنجاز إضافة أمثلة مفيدة لتكوين Iptables إضافة تكوين مفيد لإعدادات Kernel sysctl إضافة روابط لمصادر خارجية مفيدة إضافة أمثلة تكوين متقدمة وأوامر وقواعد جدول المحتويات أدوات تساعدك في تكوين Iptables أدلة/دروس تعليمية تكوين إعدادات...