15989 matches found
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
EUVD-2026-95254
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-7482
🚨 CVE-2026-7482: Ollama におけるヒープバッファオーバーリード 📝 説明 CVE-2026-7482 は、ローカル言語モデルを実行するためのオープンソースフレームワークである Ollama の /api/create および /api/push エンドポイントにおける、重大なヒープバッファオーバーリード （ Heap Buffer Over-Read ）の脆弱性を特定したものです。 この脆弱性により、リモートかつ認証されていない攻撃者がプロセスメモリを漏えい させ、以下のような機密データを暴露する可能性があります: APIキーおよび認証トークン 環境変数...
Heartbleed-PoC-Exploit-Script
Heartbleed-PoC-Exploit-Script この Python の Proof-of-Concept PoC スクリプトは、TLS ハンドシェイクを heartbeat 拡張と一緒に実行し、細工された heartbeat リクエストを送信することで、Heartbleed 脆弱性 CVE-2014-0160 を検出します。サーバーの応答を解析して漏洩したメモリを特定し、この深刻な OpenSSL の欠陥に対する脆弱性評価を支援します。 About Heartbleed は、OpenSSL の TLS heartbeat...
vucsa
취약한 클라이언트-서버 애플리케이션 VuCSA 취약한 클라이언트-서버 애플리케이션 VuCSA은 HTTP가 아닌 클라이언트-서버 애플리케이션에 대한 침투 테스트를 학습/발표하기 위해 만들어졌습니다. JavaJavaFX 그래픽 사용자 인터페이스 사용로 작성되었습니다. 현재, 이 취약한 애플리케이션은 다음과 같은 도전 과제를 포함합니다: 1. 버퍼 오버리드 시뮬레이션 2. 명령 실행 3. SQL 인젝션 4. 열거 5. XML 6. 수평적 접근 제어 7. 수직적 접근 제어 8. RCE 역직렬화 이러한 도전 과제를 해결하는 방법을 알고...
mongobleed
mongobleed CVE-2025-14847 は、MongoDB の OPCOMPRESSED バッファの過剰読み取りを利用したヒープメモリ開示エクスプロイトです。 使用法 $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length default: 20 --max-offset...
heartbleed-proof-of-concept
Heartbleed CVE-2014-0160 セットアップ セットアップを実行するには docker が必要です。 このエクスプロイトは、Client Hello メッセージからランダムバイトを動的に生成するため、実行ファイルをビルドする際にライブラリをリンクする必要があります。 正しくリンクするためにインストールが必要なパッケージは次のとおりです: sudo apt-get install libssl-dev このツールは Docker for Desktop - Version: 20.10.21 と WSL 2 でテストされています。 脆弱性を再現する手順は次のとおりです: ...
FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway
A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...
heartpatch.us
heartpatch.us 工事中 ワールドワイドウェブ上のサーバーにおけるHeartbleed OpenSSLの脆弱性にパッチを適用します。 着想 Heartbleedは、TLS（Transport Layer...
heartbleed
Heartbleed バグ シナリオの説明 Heartbleed バグは、OpenSSL ライブラリの脆弱性を悪用するサイバーセキュリティ攻撃の一例です。簡単に言うと、OpenSSL ライブラリの検証ステップが欠落しているため、ハッカーが脆弱なライブラリを使用しているサーバー上の機密情報にアクセスできる可能性があります。クライアントとサーバー間の SSL 接続を確立するためのハンドシェイクプロトコルの一部として、クライアントから heartbeat...
CVE-2021-40154
CVE-2021-40154 LPC55S69 및 K82 USB 시스템 내 프로그래밍ISP 버퍼 오버 리드 취약점 LPC55S69 및 K82 시리즈 개정 A2에서 발견된 BootROM 취약점을 테스트하기 위한 POC입니다. 이 취약점은 LPC55S69의 새로운 개정 A3가 적용된 최신 장치에서 수정되었습니다. 취약한 장치: 확인됨: LPC55S69 및 K82 시리즈 MCU 의심됨: 유사한 USB ISP 스택을 가진 다른 NXP 시리즈 MCU - Kinetis K 시리즈 및 RT 시리즈 취약점 요약: NXP LPC55s69 및...
expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...
CVE-2026-77214
A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...
DEBIAN-CVE-2026-77214
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
CVE-2026-77214
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
CVE-2026-77214
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
EUVD-2026-94368
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...
CVE-2026-77214
The libexpat library (versions prior to commit 13c5f63 ) contains a heap buffer over-read vulnerability in xmlparse.c. The XML_ParseBuffer function fails to validate the caller-supplied len against the allocated buffer size when updating parser->m_bufferEnd. Consecutive calls to XML_ParseBuffe...
CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...