Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo This code functionally approximates the Citrix Bleed vulnerability CVE-2023-4699 of the improper handling of the return value of snprintf in C...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Citrix NetScaler メモリ開示 CVSS 9.3 — Critical — 実環境での活発な悪用 CitrixBleed 2 は、Citrix NetScaler ADC および NetScaler Gateway におけるメモリ開示の脆弱性です。認証エンドポイントでの入力検証の不備により、メモリの境界外読み取り CWE-125 が発生し、認証されていない攻撃者がセッション Cookie、暗号鍵素材、その他の秘密情報を含む機密メモリ内容を漏えいさせることが可能になります。 概要 項目| 値 ---|--- CVE|...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4433-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4433-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

cve-images

cve-images — 意図的に脆弱なラボイメージ 隔離されたラボでセキュリティ学習を行うための意図的に脆弱な Dockerイメージのコレクションです。nginxのCVE再現から始まり、脆弱性設計イメージ（DVWAなど）のより広範なセットへと成長しています。 ⚠️ 安全性 これらのイメージは 意図的に 脆弱です。nginxのCVEの1つ（CVE-2026-42945）は実際に悪用されています。隔離された/ローカルネットワーク上でのみ実行してください。公開ホストへのデプロイは決して行わず、本番イメージとして公開しないでください。各イメージには lab.vulnerable=true...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 スキャナー - NetScaler メモリ過剰読み取り検出ツール ⚠️ 警告 このツールは教育目的および許可されたテスト専用です。所有者の明示的な許可なくシステムで使用しないでください。 📋 説明 CVE-2026-3055 用の検出ツールで、memory overread に対して脆弱な Citrix NetScaler ADC および Gateway デバイスを識別します。単一ホスト、ネットワーク、またはホストリストによるスキャンを実行し、エンドポイント /wsfed/passive?wctx でのメモリリークを検出し、管理セッション ID...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler メモリ過剰読み取りエクスプロイト ⚠️ 警告 このツールは教育目的および許可されたテスト専用です。明示的な許可なくシステムで使用しないでください。 📋 説明 CVE-2026-3055 用エクスプロイト - SAML IDP として構成された NetScaler ADC および NetScaler Gateway におけるメモリ過剰読み取り（memory overread）の脆弱性。 🔍 CVSS スコア: 9.3 CRITICAL ベクター :...

CVE-2026-3055

CVE-2026-3055 - 安全漏洞 严重性： 不适用 CVSS： 不适用 影响： 不适用 发布时间： 2026-03-23 法律声明 仅限授权安全测试使用。 根本原因（简述） 当 NetScaler ADC 和 NetScaler Gateway 配置为 SAML IDP 时，输入验证不足，导致内存过度读取 利用条件 可访问的易受攻击目标 可预测的用户/工作流上下文 无阻止恶意请求的额外加固措施 使用方法 python3 exploit.py https://target.tld 检测 监控可疑的身份验证流程偏差 调查与 CVE-2026-3055 相关的异常直接端点访问 缓解措施...

CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN Buffer Overread Note: We did not discover this, we only made a PoC for this based on the publication. https://nvd.nist.gov/vuln/detail/cve-2024-5535...

BIT-PHP-MIN-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-PHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-LIBPHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

Rocky Linux 10.1 [CIQ] Security Update: libblkid / libblkid-debuginfo / libblkid-devel / libfdisk / etc (crlsa-2026_1696)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261696 advisory. util-linux: util-linux: Heap buffer overread in setpwnam when processing 256-byte usernames CVE-2025-14104 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_9122)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249122 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_9093)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249093 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3261)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243261 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.2:CLSA-2026:1777569045)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777569045 advisory. - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2024_9333)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249333 advisory. openssl: Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 openssl: Excessive time spent checking DSA keys and parameters CVE-2024-460...

Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2024_2616)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242616 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3258)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243258 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

Rocky Linux 8 [CIQ] Security Update: mingw32-openssl / mingw32-openssl-debuginfo / mingw64-openssl / etc (crlsa-2026_60329)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202660329 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...