Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script This Python Proof-of-Concept PoC script detects the Heartbleed vulnerability CVE-2014-0160 by performing a TLS handshake with the heartbeat extension and sending a crafted heartbeat request. It parses server responses to identify leaked memory, helping assess...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508

The ESF-IDF (Espressif Internet of Things Development Framework) versions 5.5.5 , 6.0.1 , and 6.1 are vulnerable to an out-of-bounds read in the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media(). The root cause is that the function reads a timestamp field from a received media buffer ...

CVE-2026-85057

The ZITADEL identity management platform (versions 3.0.0 up to 3.4.13 and 4.16.1) contains a sandbox escape vulnerability in Actions V1 . The goja Node-compatible require() registry lacks restrictions on its filesystem source loader, allowing an organization Action author with specific permission...

EUVD-2026-86322

ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible require registry without restricting its filesystem source loader. An organization Action author with ORGOWNER, org.action.write, and org.flow.write...

DEBIAN-CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

DEBIAN-CVE-2026-97437

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfsdiremit and hdrfinde The bounds check in ntfsdiremit compares fname-namelen a character count against e-size a byte count without accounting for the 2-byte-per-character UTF-16LE encoding or t...

CVE-2026-97433

In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor sizes Validate descriptor sizes while walking the FDP configurations log so dsze == 0 or a descriptor past the log end cannot cause unbounded iteration or reads past the buffer...

CVE-2026-97437

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfsdiremit and hdrfinde The bounds check in ntfsdiremit compares fname-namelen a character count against e-size a byte count without accounting for the 2-byte-per-character UTF-16LE encoding or t...

DEBIAN-CVE-2026-97428

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

CVE-2026-97428

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

CVE-2026-94281

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

DEBIAN-CVE-2026-93816

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted imag...

CVE-2026-93816

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted imag...

CVE-2026-93793

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TXCMD response layout TXCMD parsing uses framecount to walk status entries and then read the trailing SCD SSN. Make the minimum-length check follow that exact runtime layout calculation before parsing...

CVE-2026-93544

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...

CVE-2026-93545

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93542

An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

CVE-2026-93543

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

dirty-frag-check

Comprobación de Dirty Frag CVE-2026-43284 / CVE-2026-43500 Comprobador de solo lectura para las vulnerabilidades locales de root "Dirty Frag" del kernel de Linux CVE-2026-43284, CVE-2026-43500. Comprueba la versión del kernel, el estado de los módulos, el livepatch de KernelCare y cualquier lista...