706 matches found
magisk-renef
MagiskRenef Magisk / KernelSU / APatch モジュールで、renef（Android向け動的インストルメンテーションツールキット）を自動的にパッケージ化して実行します。 magisk-frida に着想を得ています。 要件 ルート化されたAndroidデバイス（Magisk / KernelSU / KernelSU Next / APatch） ARM64のみ — renefはARM64 Androidのみをサポート Android 10以上を推奨 インストール 1. リリース から最新の MagiskRenef-version.zip をダウンロード...
refreshing-mcp-tool
这还没有真正完成或就绪，但我想先把代码提交进来。 这基本上实现了 F5 的数据库协议 "mcp"，它通过 UNIX 域套接字运行。这意味着你必须先获得 F5 设备上的 shell， 然后才能使用这些工具。通常你会将脚本输出 通过 socat 转发到 /var/run/mcp，然后将响应输入 mcp-parser.rb。 更多细节见下文。 脚本的简要说明： mcp-getloot.rb - 生成一条消息，用于导出用户和变量 mcp-privesc.rb - 生成一条消息，用于创建用户帐户 mcp-parser.rb - 解析来自 stdin 的 mcp 消息 mcp-mitm.rb -...
CVE-2021-25461
CVE-2021-25461 EuroS&P 2022 で採択された SAUSAGE Security Analysis of Unix domain Socket usAGE in Android 論文のために発見された CVE の Proof of Concept を格納したリポジトリです。 私はこの論文を、脆弱性を発見し Proof of Concept を作成した Mounir Elgharabawy と共同で執筆しました。この CVE に関する彼のリポジトリはこちらで確認できます。 すべての詳細は、このリポジトリでホストされている .sh ファイルで確認できます。...
tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition
A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...
CVE-2026-21636
CVE-2026-21636 - Node.js 权限模型 UDS/网络绕过 漏洞摘要 Node.js 权限模型 （--permission）旨在通过限制对文件系统、子进程、工作线程和网络的访问来对进程进行沙箱化。CVE-2026-21636 揭示了通过 undici/fetch（以及 net/tls）到 Unix 域套接字 和本地 TCP 地址的连接完全绕过了网络防护，即使未设置 --allow-net 也是如此。 受影响：Node.js v25（网络权限在披露时仍处于实验阶段）。 此 PoC 在 v22 上复现了该概念，其中可以观察到相同的绕过行为。 能够向在...
tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition
A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...
AlmaLinux 9.2 [TuxCare] Security Update: p11-kit / p11-kit-devel / p11-kit-server / p11-kit-trust (ALMALINUX9.2:CLSA-2026:1788357425)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788357425 advisory. - A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue...
AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788353293)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788353293 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constrain...
Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in p11-kit
Summary IBM DataPower Gateway has addressed multiple vulnerabilities in p11-kit in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey function on a remote token with...
SUSE CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
Linux Distros Unpatched Vulnerability : CVE-2026-96747
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in .sock as a local Unix domain...
DEBIAN-CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
AZL-105113 CVE-2026-96747 affecting package python-pymongo 4.2.0-9
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-96747
A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...
CVE-2026-96747
The MongoDB Python Driver client-side field level encryption support contains a vulnerability where a key management endpoint ending in .sock is incorrectly treated as a local Unix domain socket path instead of a remote host. An attacker with write access to encryption key metadata in the databas...
Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
EUVD-2026-86346
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-96747
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
PT-2026-98231
Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description Client-side field level encryption support may incorrectly interpret a key management endpoint value ending in ".sock" as a local Unix domain socket path instead of a remote hos...