CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 설명 이 스크립트는 MongoDB Server의 힙 메모리 노출 취약점 인 CVE-2025-14847"MongoBleed"를 악용하도록 설계되었습니다. 부풀려진 문서 길이를 가진 특수하게 조작된 zlib 압축 OPMSG 패킷을 전송함으로써, 서버가 응답에 초기화되지 않은 힙 메모리를 반환하도록 속입니다. 이를 통해 다음과 같은 민감한 정보가 유출될 수 있습니다: 스크립트는 다양한 오프셋으로 지속적으로 프로브를 전송하고 실시간으로 새롭게 관찰된 유출 문자열 을 출력합니다. 출력을...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Fonctionnelle Exploitation de Fuite Mémoire dans MongoDB - Attaque R6 Simulée Preuve de Concept Complète pour CVE-2025-14847 MongoBleed Testé : ✅ MongoDB 7.0.5 | 14.300+ Exploits Réussis | 4 UUIDs Fuités 🎯 À propos du Projet Ce dépôt contient une Preuve de Concept...

SUSE CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to...

DEBIAN-CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

mongobleed

mongobleed CVE-2025-14847 эксплойт для раскрытия кучи памяти MongoDB через чтение за пределами буфера OPCOMPRESSED при чтении. Использование root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port...

CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

PT-2026-84527

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 Thunderbird versions prior to 155 Description A malicious IMAP server can trigger a use-after-free a situation where a program continues to use a pointer after it has bee...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

CVE-2026-55564

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

CVE-2026-62357

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

CVE-2026-70630

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...

Linux Distros Unpatched Vulnerability : CVE-2026-70631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in...