CVE-2006-20001

CVE-2006-20001 A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. authentication| complexity|...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

CVE-2026-49919

A flaw was found in FreeType. An attacker could cause an application crash leading to a Denial of Service DoS by tricking a user or application into rendering a specially crafted color font. This issue occurs due to an integer overflow during bitmap dimension calculations when blending color font...

mongobleed-scanner

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily 🚀 Getting Started Welcome to mongobleed-scanner! This tool helps you discover vulnerabilities in MongoDB related to heap memory leaks. Protect your data and enhance your security effortlessly. 📥 Download the Application Visit this pag...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

heaplens

🔎 Heaplens Proyecto del Laboratorio II de Ciberseguridad CMPT733 📂 Estructura del Repositorio . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: ¡aquí mismo! heaplens.py: el script principal logs/:...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Funcional Explotación de Fuga de Memoria en MongoDB - Ataque R6 Simulado Prueba de Concepto Completa para CVE-2025-14847 MongoBleed Probado: ✅ MongoDB 7.0.5 | 14.300+ Exploits Exitosos | 4 UUIDs Filtrados 🎯 Sobre el Proyecto Este repositorio contiene una Prueba de...

CVE-2025-14847

CVE-2025-14847 Entorno de Vulnerabilidad CVE-2025-14847 con un PoC https://jira.mongodb.org/browse/SERVER-115508 RESUMEN Esta es una corrección crítica para abordar CVE-2025-14847. Actualice a 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 o 4.4.30. DESCRIPCIÓN E IMPACTO DEL PROBLEMA Una explotación del...

mongobleed

mongobleed CVE-2025-14847 exploit for MongoDB heap memory disclosure via OPCOMPRESSED buffer over-read. Usage $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length...

AlmaLinux 9.6 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.6:CLSA-2026:1784554254)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784554254 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Rocky Linux 10.0 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc (crlsa-2025_13944)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202513944 advisory. openjpeg: OpenJPEG OOB heap memory write CVE-2025-54874 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2024_3834)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243834 advisory. gdk-pixbuf2: heap memory corruption on gdk-pixbuf CVE-2022-48622 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.2:CLSA-2026:1784553427)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784553427 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1783971636)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783971636 advisory. - A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer...

Rocky Linux 9.6 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.6:CLSA-2026:1784554254)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784554254 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

CentOS Linux 6 [TuxCare] Security Update: libsmbclient / libsmbclient-devel / samba / samba-client / etc (CENTOS6:CLSA-2026:1778493573)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778493573 advisory. - Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap...

AlmaLinux 9.2 [TuxCare] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules / etc (ALMALINUX9.2:CLSA-2025:1758824659)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758824659 advisory. - In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchun...

Rocky Linux 8 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2024_3341)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243341 advisory. gdk-pixbuf2: heap memory corruption on gdk-pixbuf CVE-2022-48622 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...