heartbleed-lab

Heartbleed Lab Educational laboratory for studying the Heartbleed vulnerability CVE-2014-0160 using a real vulnerable OpenSSL environment inside Docker. This project reproduces a vulnerable TLS server using OpenSSL 1.0.1f and implements a custom raw TLS heartbeat client to demonstrate how malform...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

mongobleed

MongoDB Compression Leak Lab Safe, Educational Reference CVE : CVE-2025-14847 This repository is an educational lab that demonstrates the concept behind a class of issues often described as “compression framing / size-metadata memory disclosure” in database wire protocols. It is written to suppor...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

cve-2025-5915

CVE-2025-5915 — lectura fuera de límites de heap en RAR v4 de libarchive con prueba en dispositivo iOS 18.5 Una lectura fuera de límites de heap / divulgación de memoria controlada en la ruta del filtro RAR v4 de libarchive copyfromlzsswindow. Este repositorio la reproduce de principio a fin: ASa...

CVE-2014-0160.

CVE-2014-0160 Laboratorio para montar un laboratorio usando Heartbleed para filtrar memoria de aplicaciones web Este repositorio se centra en construir un contenedor para crear un entorno fácil de explotar nginx utilizando la técnica Heartbleed, enfocándose en: Montar el entorno usando Docker...

CVE-2025-5777

CVE-2025-5777 — Divulgación de memoria "CitrixBleed 2" en Citrix NetScaler Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — aquí no se publica ningún exploit funcional ni PoC. La secuela del CitrixBleed original: una lectura fuera de los límites en los endpoints de...

RHEL 10 : freerdp (RHSA-2026:61378)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61378 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Funcional Explotación de Fuga de Memoria en MongoDB - Ataque R6 Simulado Prueba de Concepto Completa para CVE-2025-14847 MongoBleed Probado: ✅ MongoDB 7.0.5 | 14.300+ Exploits Exitosos | 4 UUIDs Filtrados 🎯 Sobre el Proyecto Este repositorio contiene una Prueba de...

slides

Slide Conferenza| Anno| Nome| Descrizione ---|---|---|--- Zer0Con| 2023| CodeQL + DTrace = 💧🐞 in XNU| Come trovare multiple divulgazioni di memoria in XNU usando CodeQL...

CVE-2026-3055

🔥 NetScalerBleed2: Kritischer nicht authentifizierter Speicher-Overread in Citrix NetScaler CVE-2026-3055 Nicht authentifizierter Speicher-Overread Speicherleck Nur auf Appliances, die als SAML-Identity-Provider IdP konfiguriert sind 📋 Übersicht CVE-2026-3055 ist eine kritische...

ALPINE-CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2025-14847-MongoDB

CVE-2025-14847-MongoDB मेमोरी प्रकटीकरण अनुसंधान उपकरण अवलोकन यह रिपॉजिटरी एक शैक्षिक अनुसंधान उपकरण है जो CVE-2025-14847 के पीछे मेमोरी सुरक्षा अवधारणाओं को प्रदर्शित करने के लिए डिज़ाइन किया गया है, जो MongoDB के BSON डीकम्प्रेशन कार्यान्वयन में खोजी गई एक गंभीर कमजोरी है। यह उपकरण दर्शाता है क...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE-Skript, das Heartbleed/CVE-2014-0160 erkennt/ausnutzt. Dieses Skript ist jetzt im Wesentlichen das von Patrik Karlsson geschriebene mit einigen kleinen Änderungen, die aus meinem eigenen Skript portiert wurden. Funktionen Unterstützt FTP, SMTP, XMPP...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Sviluppato da m10sec. Questo script rileva automaticamente la versione di Nginx su un server remoto e valuta se è vulnerabile a falle di sicurezza note, in particolare: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corruzione della memoria in...

CVE-2017-7529-

CVE-2017-7529-Nginx Range Header Integer Overflow Nginx è un server web ad alte prestazioni, ampiamente utilizzato come reverse proxy, server cache e altro, ed è un software open source. Nelle versioni di Nginx precedenti o uguali alla 1.13.2, esiste una vulnerabilità dovuta a un integer overflow...

heartbleed

heartbleed Un semplice strumento scritto in Ruby che consente di testare i tuoi server per la vulnerabilità OpenSSL CVE-2014-0160. Dichiarazione di non responsabilità Non mi assumo alcuna responsabilità per i danni che potrebbero essere causati dall'uso di questo strumento. È stato scritto per...

rndis-co

RNDIS-CO Sommario Il gadget USB RNDIS può essere sfruttato per scaricare il contenuto dello spazio di memoria del kernel tramite il meccanismo di aggiornamento del filtro dei pacchetti. Descrizione Il gestore della richiesta di trasferimento di controllo USB RNDISMSGSET - rndissetresponse chiama...