CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit is a Proof-of-Concept PoC exploit tool for CVE-2025-14847 , a memory leak vulnerability in MongoDB. This tool exploits a bug in zlib decompression to leak server memory via BSON field names. By crafting a BSON payload with an inflated document length, it...

RefluxFS_CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...

CS-MemoryEvasion

MemoryEvasion A Cobalt Strike memory evasion loader for redteamers,Support x86/x64 stager/stagerless payload with profiletested on windows7/10,winserver 2012 How Evasion? Hook Sleep,CreateProcessA,CreateHeap,GetProcessHeap functions before the shellcode is loaded into memory. Create a new heap fo...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853 Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

EUVD-2026-96426

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-98264

A flaw was found in the Advanced Linux Sound Architecture ALSA virtio sound driver in the Linux kernel. During device removal or system suspend operations, virtual queues are deleted before the virtual device is reset, allowing the device to access queue memory buffers after they have been freed...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE An optimized Python 3 Proof-of-Concept PoC exploit for WiFi Mouse Server v1.7.8.5. This script leverages an inherent protocol vulnerability to achieve Remote Code Execution RCE via automated keystroke injection. This version has been explicitly modified and tuned f...

CVE-2023-25234_Tenda_AC6_stack_overflow

This repository does not have a README...

CVE-2026-98260

A flaw was found in the Linux kernel. When a multi-threaded program sets up a per-thread timer and executes a new program that subsequently fails during startup, the kernel can free timer memory while it remains referenced in an active queue. A local user could exploit this vulnerability to trigg...

CVE-2026-98259

A flaw was found in the Linux kernel. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. In the Direct Access DAX subsystem, the kernel fails to verify whether storage entries are zero or empty before converting them, leading to an invalid memor...

CVE-2026-98254

A flaw was found in the Linux kernel's Software I/O Translation Lookaside Buffer swiotlb. During Direct Memory Access DMA bounce operations involving high memory, an incorrect address calculation occurs when an offset crosses a page boundary. This error causes data transfers to read from or...

SUSE-SU-2026:24138-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination bsc1276227...

CVE-2026-98251

A flaw was found in the Linux kernel's Open vSwitch component. When handling network connection tracking conntrack labels, the kernel may reallocate memory for active connections while another processor accesses it simultaneously. This race condition can lead to memory corruption, allowing an...

CVE-2026-98384

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing socket destruction requests through the bpfsockdestroy helper, the kernel fails to properly verify if a socket is a full socket before attempting to read its protocol field, causing an out-of-bounds memor...

CVE-2026-98383

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local attacker with privileges to load BPF programs could exploit this vulnerability to cause a Denial of Service DoS or potentially corrupt system memory. The issue occurs when an IPv6 segment routing program modifies...

CVE-2026-98382

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS by triggering an out-of-bounds memory read. When handling device-bound programs, improper validation allows a program intended for one...

CVE-2026-98377

A flaw was found in the Linux kernel's VLAN Virtual Local Area Network networking component. A local user can exploit this vulnerability by transmitting crafted, undersized network frames that trigger multiple VLAN tag insertions without verifying the presence of a Media Access Control MAC header...