82950 matches found
CVE-2026-78124
CVE-2026-78124 affects strongSwan (IKE/IPsec suite), versions 5.0.2 through 6.0.7 . The vulnerability is a memory leak in the openssl plugin during the enumeration of certificates in PKCS#7 containers, where memory is not released after its effective lifetime. This can lead to gradual memory exha...
CVE-2026-78124
strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...
ms-photos_NTLM_Leak
Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...
mongobleed
mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...
whatsapp-census
Hey there! You are using WhatsApp This is the github repository for the extended version of the paper Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Abstract WhatsApp, with 3.5 billion active accounts as of early 2025, is the world's largest instan...
PT-2026-89675
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
PT-2026-89737
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...
PT-2026-89673
strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...
POC-CVE-2023-32681
POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...
hbp-attack-demo
fork from https://github.com/veritas501/hbpattackdemo hbpattack demo Reference: P0 blog: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Created a vuln module, pretending we have a kernel arbitrary address write primitive, but KASLR is...
HashCheck
PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...
GHSA-486V-Q2WF-FP2R rclone: http backend forwards custom/auth headers to a different host on redirect
Vulnerability Details File: backend/http/http.go Lines: 285 client construction — no CheckRedirect, 505-510 addHeaders, writes configured secret headers onto every request, 533-534 / 700-701 / 782-785 f.httpClient.Doreq used by List/stat/download Root Cause The http backend lets a user attach...
rclone: http backend forwards custom/auth headers to a different host on redirect
Vulnerability Details File: backend/http/http.go Lines: 285 client construction — no CheckRedirect, 505-510 addHeaders, writes configured secret headers onto every request, 533-534 / 700-701 / 782-785 f.httpClient.Doreq used by List/stat/download Root Cause The http backend lets a user attach...
DNSExfiltrator
DNSExfiltrator Author: Arno0x0x - @Arno0x0x DNSExfiltrator allows for transfering exfiltrate a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. DNSExfiltrator has two sides: 1. The server side , coming as a singl...
cve-2024-21626-runc-1.1.11-escape
CVE-2024-21626 - runc Leaky Vessels Overview Field| Detail ---|--- CVE| CVE-2024-21626 Affected Component| runc ≤ 1.1.11 Vulnerability Class| Container escape via file descriptor leak Nickname| Leaky Vessels Root Cause runc leaks an internal file descriptor typically fd/7 pointing to the host...
node9-proxy
🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — what it's already been doing, against risky actions in real time, and what happened over any time window...
DDWPasteRecon
DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...
fb-sleep-stats
fb-sleep-stats: Using Facebook to track your friends' sleep A small tool to show the potential privacy implications modern social media have. By tracking online/offline status of people on Facebook, it is possible to get an accurate image of their sleep pattern. Read the blog post:...
lykan
lykan Lykan is a leak analysis program written in C that generates visual graphs of the analysed data. It receives as inputs raw password text dumps where the passwords are separated by '\n' and extracts statistical information about the dumps, including the top passwords, character popularity et...
