vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...

CVE-2026-91959

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

CVE-2026-92176

CVE-2026-92176 is an out-of-bounds read vulnerability in pdfforge PDF Architect , located in the handling of App objects . The root cause is a lack of proper validation of user-supplied data, allowing a read past the end of an allocated buffer that an attacker can leverage to achieve remote code ...

EUVD-2026-79139

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

CVE-2021-40154

CVE-2021-40154 LPC55S69 and K82 USB In-System Programming ISP Buffer Over Read Vulnerabilities POC to test the BootROM vulnerability found in LPC55S69 and K82 Series Revision A2. The vulnerability is fixed in newer devices with newe Revision A3 for LPC55S69. Vulnerable Devices: Confirmed: LPC55S6...

CVE-2026-91959

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...

EUVD-2026-78635

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...

heartpatch.us

heartpatch.us Under Construction Patching heartbleed openssl vulnerabilities on servers across the world wide web. Inspiration Heartbleed is a security bug in the OpenSSL cryptography library, which is a widely used implementation of the Transport Layer Security TLS protocol. It was introduced in...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's ancient cousin, hiding in Squid since 1997. ✨ Features Single-file PoC — Zero dependencies Malicious FTP server mimicking NetWare banner + truncated LIST response Real-time detection and decoding of Basic Auth + Bearer tokens Multi-threaded heap...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ Disclosure Status: All findings in this repository were submitted to the HPE Networking Bug Bounty Program Bugcrowd between May–June 2026. Five of six submissions were closed as "Not Applicable" at triage level without technical reconciliation of the submitted evidence. No fixes have been issue...

cve-2022-21877

POC CVE-2022-21877 This repository contains a POC for the CVE-2022-21877, found by Quang Linh, working at STAR Labs. This is an information leak found inside the spaceport.sys driver. An accompying blogpost can be found at this address. Using it To build the POC, simply run .\build. To run it, yo...

HeartLeak

HeartLeak Yet, another exploitation script for the most buzzed bug of all the time. The script has two features: scan: Generates random hosts IP addresses, checks if they supports OpenSSL, test them if they vulnerable to CVE-2014-0160 Heartbeat Buffer over-read bug and save vulnerable hosts in a...

CVE-2019-19203

CVE-2019-19203 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantul...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

CVE-2026-90610

A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...

CVE-2026-90610

CVE-2026-90610 is a buffer over-read (heap, size 20) in the function gf_svg_attributes_copy within scenegraph/svg_attributes.c , part of the MP4Box component of the GPAC media framework. The flaw is reachable with local access and low privileges , requiring no user interaction. Impact is limited ...