CVE-2026-55215

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2025-49132-PoC

CVE-2025-49132 PoC di Pwndalf Panoramica Questo repository contiene un Proof of Concept PoC per CVE-2025-49132, una vulnerabilità di Remote Code Execution RCE che interessa Pterodactyl Panel 1.11.11 Questo PoC è stato sviluppato e testato in un ambiente di laboratorio controllato per scopi di...

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

Summary When SSL/TLS is enabled but no CA / server certificate is provided, the connector verifies the server's identity using fingerprint validation. The check is effective, the connection is ultimately rejected when it fails, but it happens after the authentication exchange. As a result, the...

GHSA-CQHC-2H57-WPXF MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

Summary When SSL/TLS is enabled but no CA / server certificate is provided, the connector verifies the server's identity using fingerprint validation. The check is effective, the connection is ultimately rejected when it fails, but it happens after the authentication exchange. As a result, the...

CVE-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

CVE-2026-55215 MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate...

CVE-2026-55215

MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...

CVE-2024-50482

CVE-2024-50482 WooCommerce Product Design = 1.0.0 - Nicht authentifizierter beliebiger Dateiupload Beschreibung: Das WooCommerce Product Design Plugin für WordPress ist anfällig für beliebige Dateiuploads aufgrund fehlender Dateityp-Validierung in allen Versionen bis einschließlich 1.0.0. Dies...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - RCE autenticado no Chyrp Lite ≤ 2026.01 "Iriomote" Ataque encadeado: bypass da blocklist de uploadspath CVE-2026-53768 + ausência de validação de extensão de arquivo em adminupdateupload CVE-2026-53767 → Execução Remota de Código como www-data...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Analisi Difensiva della Vulnerabilità Panoramica Questo repository documenta un'analisi difensiva di CVE-2009-4496 , una vulnerabilità storica associata al web server Boa. L'obiettivo di questo progetto è esaminare la vulnerabilità da una prospettiva di sicurezza difensiva...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server intestazione @ non attendibile → spoofing dei metadati interni CVSS 10.0 Critico · CWE-20 · GHSA-jrh6-9hgv-mqm7 Riepilogo Apache Traffic Server riserva le intestazioni con prefisso @ @Ats-Internal, @ICAP-Status, @TCPInfo, ... per i metadati interni : risiedo...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 – Nicht authentifizierter beliebiger Datei-Upload Beschreibung Das AR for WooCommerce-Plugin für WordPress ist in allen Versionen bis einschließlich 6.2 aufgrund fehlender Dateityp-Validierung anfällig für beliebige Datei-Uploads. Dadurch können nicht...

langflow-cors-scanner

CVE-2025-34291 — Langflow Origin Validation / CORS Panoramica Una configurazione CORS eccessivamente permissiva abbinata alla configurazione del cookie di refresh token consente il furto di credenziali...

vm-homelab-log4shell-assessment

Valutazione delle vulnerabilità e convalida dello sfruttamento — Apache Solr / Log4Shell Laboratorio di gestione delle vulnerabilità a ciclo completo: scansione → prioritizzazione → convalida manuale → rilevamento a livello di rete → remediation → verifica. Target: container Solr 8.11.0 di Vulhub...

ResetNightmare

ResetNightmare Strumento proof-of-concept POC per ResetNightmare CVE-2026-27912. ResetNightmare è una falla di validazione nel protocollo Kerberos Change Password che consente di reimpostare la password di qualsiasi account utente/computer, senza conoscerne quella attuale. L'attacco richiede un...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Confusão de Tamanho de Dados de Retorno em Assembly Solidity Código do Programa Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret =...

EUVD-2026-67853

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – Dirottamento del frammento nel flusso implicito OAuth2 Codice del programma Node.js + Exploit root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri =...

offensive-security-adversary-emulation

Projekt 5 — Offensive Security & Adversary Emulation Teil eines 5-Projekte-Home-Lab-SOC-Bogens: aufbauen → erkennen & anreichern → untersuchen → überwachen & jagen → angreifen & gegenprüfen. Dieses Projekt ergänzt die fehlende Hälfte des Bildes aus den Projekten 1–4: Alles davor war Blue Team...