CVE-2026-21691

CVE-2026-21691 affects the iccDEV library. Versions prior to 2.3.1.2 contain a Type Confusion flaw in CIccTag:IsTypeCompressed() when processing ICC color profiles. A patch exists in version 2.3.1.2; update to 2.3.1.2 or later to remediate. No public exploitation details are provided in the avail...

PT-2026-2088

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain a Type Confusion flaw in the...

PT-2026-28928

Уязвимость библиотеки python-urllib3 связана с некорректной обработкой сильно сжатых входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

EUVD-2025-206229

AIOHTTP's HTTP Parser autodecompress feature is vulnerable to zip bomb...

CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory...

PT-2026-26146

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP BGZF files. In the GZI loading function, bgzf index load hfile, it was possible to trigger an integer overflow, leading to an under- or zero-sized buffer being allocated to...

Exploit for CVE-2025-14847

MongoBleed - CV...

SUSE CVE-2022-50811

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

Exploit for CVE-2025-14847

MongoBLEED---CVE-2025-14847-POC- This repo contains my python...

EUVD-2022-55887

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

Exploit for CVE-2025-14847

CVE-2025-14847-MongoBleed - Scanner+Detection+Exploit+Remediat...

UBUNTU-CVE-2022-50811

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50811

CVE-2022-50811 concerns the Linux kernel erofs code. The connected sources confirm a concrete fix: when z_erofs_get_extent_compressedlen() fails, there is a missing unmap that could allow leakage of meta buffers. The remediation is a kernel patch implemented in the erofs path to ensure proper unm...

CVE-2022-50811

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

Exploit for CVE-2025-14847

Mongobleed CVE-2025-14847 – Go Proof of Concept This reposi...

The vulnerability of the python-jose library, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the python-jose library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

resolv: Denial of Service in resolv gem

A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does...

curl: Unbounded memory consumption via compressed HTTP responses (gzip/brotli/zstd)

During a review of curl's handling of response decompression, it was noticed that no limit exists on the final uncompressed data volume from compressed HTTP replies. Instead of setting constraints, the current design allows indefinite expansion during processing. This absence of limits could lead...