mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

CVE-2025-1094-Lab-Setup

🛠️ Configuración del Laboratorio CVE-2025-1094 ⚠️ Aviso legal Este laboratorio es solo con fines educativos y de investigación. NO utilice ninguna de las técnicas o información aquí demostradas en sistemas que no sean de su propiedad o para los que no tenga permiso explícito de prueba. El uso no...

CVE-2021-4034

CVE-2021-4034 root@kitploit: $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2019-9053

CVE-2019-9053 Exploit de CVE-2019-9053 para Python 3 Última prueba: 28-12-2021 Probado en: Python 3.10.1 Fuente original del exploit: https://www.exploit-db.com/exploits/46635 Los usuarios asumen toda la responsabilidad por cualquier acción realizada con esta herramienta. Si estos términos no son...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Ejecución de comandos mediante el filtro de meta-comandos Resumen El filtro de meta-comandos de restauración PLAIN introducido en pgAdmin como parte de la corrección del Issue 9320 no detecta meta-comandos cuando un archivo SQL comienza con una Marca de Orden de Bytes UTF-8 EF BB BF...

Astra Linux – Vulnerability in libxml-parser-perl

Versions of XML::Parser from 2.45 onwards for Perl may overflow the pre-allocated buffer size, leading to heap corruption double-free or corruption and crashes. The A:utf8 PerlIO layer, using the parsestream function in Expat.xs, may cause the XML input buffer to overflow. This is because Perl’s...

CVE-2025-13780

CVE-2025-13780: Escáner RCE para pgAdmin 4 = 8.14 Un escáner de vulnerabilidades integral para CVE-2025-13780 , una vulnerabilidad de ejecución remota de código RCE en pgAdmin 4 versiones ≤ 8.14. 🔍 Detalles de la vulnerabilidad La vulnerabilidad existe en la función Restore de pgAdmin 4. La...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...

CVE-2026-82052 $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...

CVE-2026-82052

MongoDB 's $regexFindAll expression in aggregation pipeline stages can crash the mongod server under specific conditions where a regex match starts in the middle of a multi-code-unit (UTF-8) character , triggering an assertion during query execution. The result is a denial of service (high availa...

CVE-2026-82052 $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...

Linux Distros Unpatched Vulnerability : CVE-2026-55858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector...

CVE-2026-55858

A flaw was found in MariaDB Connector/J, a component used to connect Java applications to MariaDB and MySQL databases. The connector incorrectly assumes a UTF-8 character set for communication, even if the database server changes its client character set to a non-UTF-8 value during a session. Thi...

Amazon Linux 2 : containerd, --advisory ALAS2ECS-2026-135 (ALASECS-2026-135)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-135 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracte...

Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-134 (ALASECS-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-134 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted...