heartpatch.us

heartpatch.us Under Construction Patching heartbleed openssl vulnerabilities on servers across the world wide web. Inspiration Heartbleed is a security bug in the OpenSSL cryptography library, which is a widely used implementation of the Transport Layer Security TLS protocol. It was introduced in...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2021-40154

CVE-2021-40154 Vulnerabilidades de sobrelectura de búfer en la programación en sistema ISP USB de LPC55S69 y K82 POC para probar la vulnerabilidad BootROM encontrada en las series LPC55S69 y K82 Revisión A2. La vulnerabilidad está corregida en dispositivos más nuevos con la nueva Revisión A3 para...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ Estado de divulgación: Todos los hallazgos de este repositorio fueron enviados al Programa de Bug Bounty de Redes de HPE Bugcrowd entre mayo y junio de 2026. Cinco de seis envíos fueron cerrados como "No aplica" en el nivel de triaje sin reconciliación técnica de las pruebas presentadas. No se...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...

cve-2022-21877

POC CVE-2022-21877 This repository contains a POC for the CVE-2022-21877, found by Quang Linh, working at STAR Labs. This is an information leak found inside the spaceport.sys driver. An accompying blogpost can be found at this address. Using it To build the POC, simply run .\build. To run it, yo...

HeartLeak

HeartLeak Otro script de explotación para el bug más sonado de todos los tiempos. El script tiene dos características: scan: Genera hosts aleatorios direcciones IP, verifica si soportan OpenSSL, los prueba si son vulnerables a CVE-2014-0160 error de sobrelectura del búfer de Heartbeat y guarda lo...

CVE-2026-80603

A flaw was found in the Linux kernel's netfilter component, specifically within the nfconntrackirc module. An off-by-one error in the parsedcc function can cause the system to read one byte beyond an allocated buffer. This can lead to the use of uninitialized or stale data, potentially resulting ...

CVE-2026-70651

A flaw was found in libvips, an image processing library. When libvips is built without libtiff support but with ImageMagick support, an integer overflow can occur while loading a crafted multi-page Tagged Image File Format TIFF image. This overflow, caused by unchecked calculations of image fram...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ El primo antiguo de Heartbleed, escondido en Squid desde 1997. ✨ Características PoC de un solo archivo — Cero dependencias Servidor FTP malicioso que imita el banner de NetWare + respuesta LIST truncada Detección y decodificación en tiempo real de tokens Basic...

CVE-2019-19204

CVE-2019-19204 In Oniguruma 6.x vor 6.9.4rc2 wurde ein Problem entdeckt. In der Funktion fetchintervalquantifier früher bekannt als fetchrangequantifier in regparse.c wird PFETCH aufgerufen, ohne PEND zu prüfen. Dies führt zu einem heap-basierten Pufferüberlesen. Forscher: ManhND des The Tarantul...

CVE-2019-19204

CVE-2019-19204 Um problema foi descoberto no Oniguruma 6.x anterior a 6.9.4rc2. Na função fetchintervalquantifier anteriormente conhecida como fetchrangequantifier em regparse.c, PFETCH é chamado sem verificar PEND. Isso leva a uma leitura além do limite do buffer baseada em heap. Pesquisador:...

CVE-2019-19203

CVE-2019-19203 In Oniguruma 6.x vor 6.9.4rc2 wurde ein Problem entdeckt. In der Funktion gb18030mbcenclen in der Datei gb18030.c wird ein UChar-Zeiger dereferenziert, ohne zu prüfen, ob er das Ende der gefundenen Zeichenkette überschritten hat. Dies führt zu einem Heap-basierten Pufferüberlesen...

AZL-98096 CVE-2026-80662 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2019-19203

CVE-2019-19203 È stato scoperto un problema in Oniguruma 6.x prima della versione 6.9.4rc2. Nella funzione gb18030mbcenclen nel file gb18030.c, un puntatore UChar viene dereferenziato senza verificare se ha superato la fine della stringa corrispondente. Ciò porta a una lettura eccessiva del buffe...