EUVD-2026-95254

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read en Ollama 📝 Descripción El CVE-2026-7482 identifica una vulnerabilidad crítica de lectura fuera de límites en el montículo Heap Buffer Over-Read en los endpoints /api/create y /api/push de Ollama , un framework de código abierto para ejecutar modelos de...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Este script de prueba de concepto PoC en Python detecta la vulnerabilidad Heartbleed CVE-2014-0160 realizando un handshake TLS con la extensión heartbeat y enviando una solicitud heartbeat manipulada. Analiza las respuestas del servidor para identificar memoria...

vucsa

易受攻击的客户端-服务器应用程序 VuCSA 易受攻击的客户端-服务器应用程序 VuCSA 旨在学习/展示如何对非HTTP客户端-服务器应用程序执行渗透测试。它使用 Java（以及 JavaFX 图形用户界面）编写。 目前，该易受攻击的应用程序包含以下挑战： 1. 缓冲区过度读取（模拟） 2. 命令执行 3. SQL注入 4. 枚举 5. XML 6. 水平访问控制 7. 垂直访问控制 8. RCE反序列化 如果你想了解如何解决这些挑战，请查看 PETEP 网站，其中描述了如何使用开源工具 PETEP 来利用它们。 提示 1：...

mongobleed

mongobleed CVE-2025-14847 exploit para la divulgación de memoria heap de MongoDB mediante una sobrelectura del búfer OPCOMPRESSED. Uso $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offse...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Configuración Necesitará docker para realizar la configuración. El exploit genera dinámicamente los bytes aleatorios del mensaje Client Hello, por lo que necesitará enlazar la librería al compilar el ejecutable. El paquete requerido a instalar, para enlazar correctamente:...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

heartpatch.us

heartpatch.us En Construcción Parcheando vulnerabilidades Heartbleed de OpenSSL en servidores de toda la World Wide Web. Inspiración Heartbleed es un bug de seguridad en la librería criptográfica OpenSSL, una implementación ampliamente utilizada del protocolo Transport Layer Security TLS. Fue...

heartbleed

Heartbleed Bug Descripción del escenario El fallo Heartbleed es un ejemplo de un ataque de ciberseguridad que explota una vulnerabilidad en la biblioteca OpenSSL. Brevemente, un paso de validación faltante en la biblioteca OpenSSL podría permitir a un hacker acceder a información sensible en un...

CVE-2021-40154

CVE-2021-40154 Vulnerabilidades de sobrelectura de búfer en la programación en sistema ISP USB de LPC55S69 y K82 POC para probar la vulnerabilidad BootROM encontrada en las series LPC55S69 y K82 Revisión A2. La vulnerabilidad está corregida en dispositivos más nuevos con la nueva Revisión A3 para...

CVE-2026-77214

A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...

DEBIAN-CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

EUVD-2026-94368

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-77214

The libexpat library (versions prior to commit 13c5f63 ) contains a heap buffer over-read vulnerability in xmlparse.c. The XML_ParseBuffer function fails to validate the caller-supplied len against the allocated buffer size when updating parser->m_bufferEnd. Consecutive calls to XML_ParseBuffe...