Lucene search
+L

96 matches found

Kitploit
Kitploit
added 2026/09/05 5:42 p.m.4 views

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 描述 此脚本旨在利用 MongoDB 服务器中被称为 CVE-2025-14847 ("MongoBleed")的 堆内存泄露漏洞 。通过发送特制的经 zlib 压缩的 OPMSG 数据包,并带有膨胀的文档长度,该脚本欺骗服务器在其响应中返回未初始化的堆内存。这可能会泄露敏感信息,例如: 脚本持续发送带有不同偏移量的探测,并实时打印 新观察到的泄露字符串 。它抑制重复项以保持输出清晰可读。 致谢 Joe Desimone 的原始 PoC 对定义的偏移范围执行单次遍历 ,收集所有唯一片段,保存到文件,并可选择在最后高亮有趣的模式。...

8.7CVSS7.5AI score0.83218EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/09/03 11:57 a.m.3 views

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - 動作するPoC MongoDBメモリリークの悪用 - シミュレートされたR6攻撃 CVE-2025-14847 MongoBleed の完全な概念実証 テスト済み: ✅ MongoDB 7.0.5 | 14,300+ 件のエクスプロイト成功 | 4 件のUUIDリーク 🎯 プロジェクトについて このリポジトリには、CVE-2025-14847 (MongoBleed として知られる)に対する完全に機能する概念実証(PoC)が含まれています。これは、MongoDBにおける認証前のヒープメモリ情報漏えいという重大な欠陥です。 背景:...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39References4
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.8 views

SUSE CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

5.8AI score0.00267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-84641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to...

7.5CVSS6.6AI score0.00267EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 10:17 p.m.5 views

DEBIAN-CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 10:17 p.m.6 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS0.00267EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 10:10 p.m.3 views

mongobleed

mongobleed CVE-2025-14847 は、MongoDB の OPCOMPRESSED バッファの過剰読み取りを利用したヒープメモリ開示エクスプロイトです。 使用法 root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length default: ...

8.7CVSS7.8AI score0.83218EPSS
SaveExploits39References1
RedhatCVE
RedhatCVE
added 2026/09/01 9:49 p.m.9 views

CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...

8.3CVSS5.9AI score0.00267EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/09/01 9:33 p.m.7 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/09/01 9:33 p.m.8 views

CVE-2026-84641

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

7.5CVSS5.3AI score0.00267EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.8 views

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote Windows host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

9.8CVSS5.6AI score0.00378EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.8 views

Mozilla Thunderbird < 155.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 155.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-86 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

9.8CVSS5.6AI score0.00378EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.16 views

PT-2026-84527

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 Thunderbird versions prior to 155 Description A malicious IMAP server can trigger a use-after-free a situation where a program continues to use a pointer after it has bee...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 5:47 a.m.4 views

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

8.7CVSS7.9AI score0.83218EPSS
SaveExploits39References2
RedhatCVE
RedhatCVE
added 2026/08/25 8:39 a.m.11 views

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/21 8:20 p.m.9 views

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0
NVD
NVD
added 2026/08/19 6:16 p.m.10 views

CVE-2026-55564

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

5.4CVSS0.00266EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:18 p.m.24 views

CVE-2026-62357

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

8.8CVSS5.6AI score0.00384EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/14 3:55 p.m.9 views

CVE-2026-70630

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...

6.8CVSS5.3AI score0.00129EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/07 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-70631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in...

6.8CVSS5.7AI score0.00131EPSS
SaveExploits0References3
Rows per page
Query Builder