CVE-2026-107634

Dislocker versions through 0.7.3 are vulnerable to a heap out-of-bounds read in the get_dataset() and get_next_datum() functions. The root cause is a failure to validate dataset and datum sizes against the metadata allocation. An attacker can craft a BitLocker volume image with inflated sizes to ...

EUVD-2026-95011

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...

CVE-2026-105405

A flaw exists in ImageMagick before versions 6.9.13-56 and 7.x before 7.1.2-31 . A remote attacker can exploit an invalid memory free vulnerability in the MVG decoder by supplying a specially crafted Magick Vector Graphics (MVG) image for processing. This triggered condition crashes the applicati...

EUVD-2026-95009

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...

CVE-2026-105405

...

CVE-2026-105405 ImageMagick before 7.1.2-31 Invalid Memory Free in MVG Decoder

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...

CVE-2026-105405

Removed by vendor...

Windows-2

Windows-2 BlueKeep 漏洞实验环境 - CVE-2019-0708 1. 概述 本仓库包含一个刻意设计为存在漏洞的 Windows 实验环境，用于演示影响远程桌面协议（RDP）服务的 BlueKeep 漏洞。 BlueKeep 是一个严重的预认证远程代码执行（RCE）漏洞，存在于 Windows 内核中。该漏洞允许未经认证的攻击者通过 RDP 服务远程触发内存损坏，可能导致系统完全被入侵或拒绝服务。 本实验环境严格用于教育和防御性安全研究目的，模拟了企业环境中常见的遗留 Windows 系统。 该项目旨在用于： 进攻性安全学习 渗透测试练习 实习与作品集展示...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE 脚本，用于发现/利用 Heartbleed/CVE-2014-0160。此脚本目前基本是 Patrik Karlsson 编写的版本，并包含从我自己的脚本移植的一些微小改动。 特性 支持 FTP、SMTP、XMPP（https://github.com/nmap/nmap/blob/master/nselib/sslcert.luaL231）。 支持所有版本的 TLS（TLSv1.0、TLSv1.1、TLSv1.2）。 将泄漏的内存以十六进制转储形式打印。 将泄漏的内存转储到文件中。 用法 检查主机是否易受攻击 此脚本会在每个...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 作者: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ 仅供教育用途 针对 MongoDB Server 中严重的未授权内存泄漏漏洞的实验环境及利用脚本。 📋 目录 漏洞概述 受影响版本 安装 实验环境 使用方法 修复方案 法律声明 🔴 漏洞概述 CVE-2025-14847 MongoBleed 是 MongoDB Server 的 zlib 压缩处理中存在的一个严重的未授权内存泄漏漏洞。 属性| 值 ---|--- CVE 编号| CVE-2025-14847 CVSS 评分| 8.7 高危...

cve-2023-31355-poc

SEV 固件漏洞 此仓库包含针对 SEV 固件中一个漏洞的利用程序。该利用程序允许在 SEV-SNP 客户机关闭后解密其任意内存。 已在 1.55.16 版本上测试（目前最新版）。 根因 snpreclaimbuffer 无条件地尝试写回 RMP 更改，即使地址不在 RMP 覆盖范围内。如果 address 不在 RMP 覆盖范围内，RMP 条目 pagermppaddr 的地址永远不会被正确初始化，并保持其初始值 0。因此固件尝试将 RMP 条目的更改写回地址 0。这很糟糕，因为地址 0 在 RMP 覆盖范围内，不应该在没有更多检查的情况下被写入。如果 address 在 RMP...

CVE-2018-17240_exploit

CVE-2018-17240exploit 针对 CVE-2018-17240（Netwave 摄像头内存泄漏）的 Bash 利用脚本 在存在漏洞的 Netwave 摄像头上运行此利用脚本， 以导出摄像头的网络配置和凭据。 凭据“可能的用户名”和“可能的密码”可用于登录到 Web 界面。 Usage : bash exploit.sh host port...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - 功能型 PoC MongoDB 内存泄露利用 - 模拟 R6 攻击 CVE-2025-14847 MongoBleed 的完整概念验证 已测试：✅ MongoDB 7.0.5 | 14.300+ 次成功利用 | 4 个 UUID 泄露 🎯 关于本项目 本仓库包含一个功能完整的概念验证（PoC） ，针对漏洞 CVE-2025-14847 ，也称为 MongoBleed ——MongoDB 中一个严重的预认证堆内存泄露缺陷。 背景：彩虹六号：围攻 事件 在 2025 年 12 月 ，游戏《彩虹六号：围攻》遭受了一次大规模攻击，约...

EUVD-2026-94995

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-14507 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...

CVE-2026-14507

IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds write (CWE-787) caused by improper memory allocation during key derivation. A remote authenticated attacker can exploit this flaw to cause a denial of service (DoS). IBM addresses this vulnerability in ver...

CVE-2026-14905

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an XML external entity injection (XXE) attack. The root cause is the improper restriction of XML external entity references when the softwa...

EUVD-2026-94991

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

CVE-2026-14905 IBM DataPower Gateway XXE

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

CVE-2020-8835

CVE-2020-8835 In the Linux kernel 5.5.0 and newer, the bpf verifier kernel/bpf/verifier.c does not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. This vulnerability also affects the Linux 5.4 stable series, starting with...