Lucene search
+L

96 matches found

Kitploit
Kitploit
added 2026/09/05 5:42 p.m.4 views

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 설명 이 스크립트는 MongoDB Server의 힙 메모리 노출 취약점 인 CVE-2025-14847"MongoBleed"를 악용하도록 설계되었습니다. 부풀려진 문서 길이를 가진 특수하게 조작된 zlib 압축 OPMSG 패킷을 전송함으로써, 서버가 응답에 초기화되지 않은 힙 메모리를 반환하도록 속입니다. 이를 통해 다음과 같은 민감한 정보가 유출될 수 있습니다: 스크립트는 다양한 오프셋으로 지속적으로 프로브를 전송하고 실시간으로 새롭게 관찰된 유출 문자열 을 출력합니다. 출력을...

8.7CVSS7.5AI score0.83218EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/09/03 11:57 a.m.4 views

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Fonctionnelle Exploitation de Fuite Mémoire dans MongoDB - Attaque R6 Simulée Preuve de Concept Complète pour CVE-2025-14847 MongoBleed Testé : ✅ MongoDB 7.0.5 | 14.300+ Exploits Réussis | 4 UUIDs Fuités 🎯 À propos du Projet Ce dépôt contient une Preuve de Concept...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39References4
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

5.8AI score0.00267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-84641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to...

7.5CVSS6.6AI score0.00267EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 10:17 p.m.5 views

DEBIAN-CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 10:17 p.m.6 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS0.00267EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 10:10 p.m.4 views

mongobleed

mongobleed CVE-2025-14847 эксплойт для раскрытия кучи памяти MongoDB через чтение за пределами буфера OPCOMPRESSED при чтении. Использование root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port...

8.7CVSS7.7AI score0.83218EPSS
SaveExploits39References1
RedhatCVE
RedhatCVE
added 2026/09/01 9:49 p.m.9 views

CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...

8.3CVSS5.9AI score0.00267EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/09/01 9:33 p.m.7 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/09/01 9:33 p.m.8 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.3AI score0.00267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.8 views

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

9.8CVSS6.3AI score0.00378EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.8 views

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

9.8CVSS6.4AI score0.00378EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.16 views

PT-2026-84527

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 Thunderbird versions prior to 155 Description A malicious IMAP server can trigger a use-after-free a situation where a program continues to use a pointer after it has bee...

7.5CVSS6AI score0.00267EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 5:47 a.m.4 views

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

8.7CVSS7.7AI score0.83218EPSS
SaveExploits39
RedhatCVE
RedhatCVE
added 2026/08/25 8:39 a.m.11 views

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/21 8:20 p.m.9 views

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0
NVD
NVD
added 2026/08/19 6:16 p.m.10 views

CVE-2026-55564

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

5.4CVSS0.00266EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:18 p.m.25 views

CVE-2026-62357

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

8.8CVSS5.6AI score0.00384EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/14 3:55 p.m.9 views

CVE-2026-70630

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...

6.8CVSS5.3AI score0.00129EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/07 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-70631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in...

6.8CVSS5.7AI score0.00131EPSS
SaveExploits0References3
Rows per page
Query Builder