mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 Description This script is designed to exploit the heap memory disclosure vulnerability known as CVE-2025-14847 "MongoBleed" in MongoDB Server. By sending specially crafted zlib-compressed OPMSG packets with an inflated document length, the script tricks the server int...

DirtyCred

DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - Functional PoC MongoDB Memory Leak Exploitation - Simulated R6 Attack Complete Proof of Concept for CVE-2025-14847 MongoBleed Tested: ✅ MongoDB 7.0.5 | 14,300+ Successful Exploits | 4 Leaked UUIDs 🎯 About the Project This repository contains a fully functional Proof of...

CVE-2006-20001

CVE-2006-20001 A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. authentication| complexity|...

EUVD-2026-125275

Out-of-bounds Write vulnerability in Apache DataSketches C++. An application that deserializes a KLL sketch from an untrusted source can have heap memory corrupted by a crafted sketch, because the serialized level boundaries were not validated. This issue affects Apache DataSketches C++: 2.0.0...

EUVD-2026-125274

Out-of-bounds Write vulnerability in Apache DataSketches C++. An application that deserializes a REQ sketch from an untrusted source can have heap memory corrupted by a crafted sketch, because the serialized compactor headers were not validated. This issue affects Apache DataSketches C++: from...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

mongobleed-scanner

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily 🚀 Getting Started Welcome to mongobleed-scanner! This tool helps you discover vulnerabilities in MongoDB related to heap memory leaks. Protect your data and enhance your security effortlessly. 📥 Download the Application Visit this pag...

CVE-2026-128067

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-124023

Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Guththila parser returned a raw input byte in place of an event code, and the AXIOM reader wrapper used that value as an index into a ten-entry lookup table without checking its...

CVE-2026-124023 Apache Axis2/C: Out-of-bounds read in the Guththila XML reader wrapper

Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Guththila parser returned a raw input byte in place of an event code, and the AXIOM reader wrapper used that value as an index into a ten-entry lookup table without checking its...

CVE-2026-124023

Apache Axis2/C versions through 2.0.0 are vulnerable to an out-of-bounds read in the Guththila XML parser wrapper. When processing malformed XML input, the Guththila parser may return a raw input byte as an event code; the AXIOM reader wrapper then uses this value as an index into a ten-entry loo...

EUVD-2026-124339

Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Guththila parser returned a raw input byte in place of an event code, and the AXIOM reader wrapper used that value as an index into a ten-entry lookup table without checking its...

CVE-2026-124023 Apache Axis2/C: Out-of-bounds read in the Guththila XML reader wrapper

Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Guththila parser returned a raw input byte in place of an event code, and the AXIOM reader wrapper used that value as an index into a ten-entry lookup table without checking its...

heaplens

🔎 Heaplens CMPT733 Cybersecurity Lab II Project 📂 Repo Structure . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: right here! heaplens.py: the main script logs/: contains some sample logs we...

cve-2025-5777

CitrixBleed2 - CVE-2025-5777 PoC Scanner This repository contains an advanced Proof of Concept PoC scanner for CVE-2025-5777 , dubbed CitrixBleed2 , a memory disclosure vulnerability affecting Citrix NetScaler ADC and Gateway. I did some changes to the original poc, this script is based on resear...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

mongobleed

mongobleed CVE-2025-14847 exploit for MongoDB heap memory disclosure via OPCOMPRESSED buffer over-read. Usage $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length...