mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed — CVE-2025-14847 Лаборатория исследования безопасности CVE-2025-14847 | CVSS 8.7 High | Неаутентифицированное раскрытие памяти 📖 Полная документация • 🔬 Технический анализ • ⚡ Быстрые команды 🎯 Сводка по CVE-2025-14847 MongoBleed — критическая уязвимость раскрытия памяти в сетевом...

PT-2026-87866

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

CVE-2026-72949: NULL Pointer Dereference

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

[SECURITY] Fedora 43 Update: rust-syslog-7.0.0-2.fc43

Syslog message formatter and writer, supporting unix sockets, UDP and TCP exporters...

CVE-2026-57089

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

EUVD-2026-44269

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

...

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

PT-2026-58625

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use after free issue exists in the Windows SMB Server Network Transport Driver srvnet.sys. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use...

CVE-2026-57089: Use After Free

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

OpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server

Impact Unauthenticated denial of service. Summary When installing provider or module packages from attacker-controlled servers, the server may cause tofu initto enter an infinite loop sending garbage data to that server. Those who depend on modules or providers served from untrusted third-party...

CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993299 advisory. In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skbmacheader in ndostartxmit Drivers should not assume skbmacheaderskb ==...

EUVD-2020-17866

Malware in sbrugna...

EUVD-2023-42336

Malicious code in bioql PyPI...

DEBIAN-CVE-2025-38035

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of nvmettcpsetqueuesock, but if the TCP connection isn't established when nvmettcpsetqueuesock is called then queue-statechange isn't set and...

CVE-2023-38537

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability...

CVE-2020-25179

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25175

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

UBUNTU-CVE-2025-37777

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2leasebreaknoti Move tcptransport free to ksmbdconnfree. If ksmbd connection is referenced when ksmbd server thread terminates, It will not be freed, but conn-tcptransport is freed...