mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2019-9053

CVE-2019-9053 CVE-2019-9053 Exploit for Python 3 Last tested: 28-12-2021 Tested on: Python 3.10.1 Original Exploit Source: https://www.exploit-db.com/exploits/46635 Users take full responsibility for any actions performed using this tool. If these terms are not acceptable to you, then do not use...

CVE-2026-114432

The Contact Form 7 WordPress plugin (versions 6.2-6.2.3 ) is vulnerable to an unauthenticated arbitrary file upload due to a lack of validation for file types/extensions and a flaw in temporary-file cleanup. This allows attackers to upload files to the server. On specific configurations, such as ...

CVE-2026-114432 Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename

The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporary-file cleanup leaves the uploaded file on disk, allowing unauthenticated users to upload arbitrary files to the site. On a stock Debian ...

CVE-2021-4034

CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2026-92612

A flaw was found in Eclipse iceoryx2, specifically within the iceoryx2-bb-container component. The StaticString functionality exposes its contents as mutable bytes through safe programming interfaces. However, the String::asstr method converts these bytes into a Rust string slice without proper...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

UBUNTU-CVE-2026-123202

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-87082

A flaw was found in Net::IDN::Punycode. An attacker can provide specially crafted, malformed UTF-8 input to the encodepunycode function. This lack of validation can lead to the application hanging, crashing, or generating an incorrect label, resulting in a Denial of Service DoS or data integrity...

CVE-2026-106122

A flaw was found in the RabbitMQ Java client library. A remote attacker capable of submitting Remote Procedure Call RPC messages with malformed UTF-8 character sequences can cause a Denial of Service DoS. When the client library decodes and re-encodes an invalid property string, it exceeds intern...

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names

A flaw was found in XML::LibXML for Perl. A remote attacker could exploit this vulnerability when processing specially crafted XML node names containing incomplete UTF-8 character sequences. This can lead to an out-of-bounds read in heap memory, potentially causing the application to crash and...

RHEL 8 : perl-XML-LibXML (RHSA-2026:93470)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93470 advisory. This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module...

CVE-2019-9053

CVE-2019-9053 CVE-2019-9053 Exploit for Python 3 Last tested: 28-12-2021 Tested on: Python 3.10.1 Original Exploit Source: https://www.exploit-db.com/exploits/46635 Users take full responsibility for any actions performed using this tool. If these terms are not acceptable to you, then do not use...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...

[SECURITY] Fedora 45 Update: perl-Encoding-FixLatin-1.04-2.fc45

Most encoding conversion tools take input in one encoding and produce output in another encoding. This module takes input which may contain characters in more than one encoding and makes a best effort to convert them all to UTF-8 output...

CLEANSTART-2024-YP08801 xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence

Security vulnerability affects the xterm package. xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Meta-Command Filter Command Execution Summary The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for Issue 9320 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special sequences. The implemented filter...

GHSA-GRFQ-R75J-RW9X MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

Summary MariaDB Connector/J decodes every result as UTF-8 and guards charactersetclient against a change to another charset, but did not guard charactersetresults, and relied on the server's global sessiontracksystemvariables list to be told about charset changes at all. Details The connector...