EUVD-2026-124134

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126870

A flaw was found in the ANGLE component of chromium-browser. A remote attacker could trigger this issue by convincing a user to visit a specially crafted HTML page, leading to information disclosure. Due to an uninitialized resource handling error, this vulnerability allows the attacker to read...

CVE-2026-126913

Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126841

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126841

Google Chrome versions prior to 157.0.8103.78 are vulnerable to an out-of-bounds read in the Skia component. A remote attacker who has already compromised the renderer process can exploit this flaw to read memory outside the sandbox by serving a crafted HTML page . No specific exploit links or re...

CVE-2026-126913

Google Chrome versions prior to 157.0.8103.78 are vulnerable to an out-of-bounds read in the Compositing component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to read memory outside the sandbox by hosting a crafted HTML page. No specific exp...

CVE-2026-126841

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126913

Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-123866

Node.js is vulnerable to a use-after-free vulnerability in the HTTP/2 stream teardown process. When a stream is torn down while a write is still backpressured (e.g., by a peer RST_STREAM or a per-stream timeout), the response buffer is freed but a reference to it remains active. This allows freed...

CVE-2026-123864

Node.js is vulnerable to a cross-connection memory disclosure via a re-entrancy flaw in the HTTPS request parser. The issue occurs because TLSWrap::DoWrite() calls ClearOut() directly when asked to write zero bytes; if this occurs within the HTTP parser's on_body callback, it decrypts the next TL...

jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers

A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the jvparsesized function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the erro...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

slides

Slides Conference| Year| Name| Description ---|---|---|--- Zer0Con| 2023| CodeQL + DTrace = 💧🐞 in XNU| How to find multiple memory disclosures in XNU using CodeQL...

jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers

A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the jvparsesized function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the erro...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak PoC 📌 Description This script exploits a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway appliances, identified as CVE-2025-5777 dubbed CitrixBleed 2. It triggers a memory leak through the /p/u/doAuthentication.do endpoint,...

MongoBleed-CVE-2025-14847

MongoBleed CVE-2025-14847 – Vulnerability Checker Systemhaus Schulz – Security Tools A professional-grade security scanner to detect the MongoBleed CVE-2025-14847 MongoDB memory disclosure vulnerability. Unlike simple version-check tools, this scanner uses a PoC-accurate probing technique , safel...

heartbleed-PoC

Heartbleed PoC A sample example of the Heartbleed attack using the server https://www.cloudflarechallenge.com/ made for trying this attack. First, the two best explanations I read on the subject : http://www.seancassidy.me/diagnosis-of-the-openssl-heartbleed-bug.html http://xkcd.com/1354/ Exploit...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...

razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC

Lycosa.sys, Razer: two kernel vulnerabilities reachable by any local user Discovered through https://github.com/416rehman/DeepZero Vendor: Razer Inc. Component: Lycosa.sys, the Razer Lycosa keyboard filter driver, x64 SHA-256: a120a6184ab16864e8a5f1dfd0cd178fca541de463b5cef946e18c34b9b6f716...