mongobleed-scanner

🐍 mongobleed-scanner: escanea vulnerabilidades de MongoDB fácilmente 🚀 Primeros pasos ¡Bienvenido a mongobleed-scanner! Esta herramienta te ayuda a descubrir vulnerabilidades en MongoDB relacionadas con fugas de memoria en el montón. Protege tus datos y mejora tu seguridad sin esfuerzo. 📥 Descarg...

PHP_8.1.x_Exploit

🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...

CVE-2026-95834: Use After Free

Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the terminal to read from and write to freed heap memory, because dragremotefiledata in kitty/dnd.c holds a DragRemoteItem pointer into an arra...

Linux Distros Unpatched Vulnerability : CVE-2026-95834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the...

heaplens

🔎 Heaplens Proyecto del Laboratorio II de Ciberseguridad CMPT733 📂 Estructura del Repositorio . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: ¡aquí mismo! heaplens.py: el script principal logs/:...

CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis

A flaw was found in Unbound. Improper handling of buffer positions and compression pointers in Unbound's CNAME synthesis allows a remote attacker to corrupt heap memory via upstream DNS responses. This vulnerability can result in a denial of service DoS or, under specific conditions, remote code...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Funcional Explotación de Fuga de Memoria en MongoDB - Ataque R6 Simulado Prueba de Concepto Completa para CVE-2025-14847 MongoBleed Probado: ✅ MongoDB 7.0.5 | 14.300+ Exploits Exitosos | 4 UUIDs Filtrados 🎯 Sobre el Proyecto Este repositorio contiene una Prueba de...

CVE-2026-66079

A flaw was found in RabbitMQ. An unauthenticated network attacker can exploit an issue in the AMQP 1.0 listener by sending a specially crafted 19-byte frame. This causes the system to attempt to build a list of approximately 4 billion empty elements, exhausting heap memory and terminating the...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 漏洞环境及 PoC https://jira.mongodb.org/browse/SERVER-115508 摘要 这是一个关键修复，用于解决 CVE-2025-14847。请升级至 8.2.3、8.0.17、7.0.28、6.0.27、5.0.32 或 4.4.30 版本。 问题描述与影响 攻击者可通过客户端利用服务器 zlib 实现的漏洞，在未进行身份认证的情况下返回未初始化的堆内存。我们强烈建议尽快升级至已修复版本。 此问题影响以下 MongoDB 版本： MongoDB 8.2.0 至 8.2.3 MongoDB...

unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis

A flaw was found in Unbound. Improper handling of buffer positions and compression pointers in Unbound's CNAME synthesis allows a remote attacker to corrupt heap memory via upstream DNS responses. This vulnerability can result in a denial of service DoS or, under specific conditions, remote code...

mongobleed

mongobleed CVE-2025-14847 exploit para la divulgación de memoria heap de MongoDB mediante una sobrelectura del búfer OPCOMPRESSED. Uso $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offse...

thunderbird: Information disclosure due to malicious IMAP server response

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js...

Linux Distros Unpatched Vulnerability : CVE-2026-81878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable...

CVE-2026-81508: Out-of-bounds Read

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

Security update for mcphost (important)

openSUSE security update: security update for mcphost ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21886-1 Rating: important References: bsc1278853 bsc1279274 bsc1279396 Cross-References: CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores:...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-6794 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-66079

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parsearrayprimitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times consumin...