CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...

Mongobleed-Detector-CVE-2025-14847

MongoBleed Scanner A professional vulnerability scanner for CVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability. +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak Vulnerability |...

CVE-2026-101994

An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed...

CVE-2026-101994 Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash

An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed...

EUVD-2026-101477

An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed...

CVE-2026-101994

A vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to disclose process heap memory or cause a denial of service . This issue stems from an Improper Handling of Length Parameter Inconsistency when processing a malformed MC-LAG ICCP message . An...

Palimpsest

CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...

CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade

FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile-current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBTTILEFIRST then WBTTILEUPGRADE sequence to paint heap bytes onscreen or abort...

CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade

FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile-current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBTTILEFIRST then WBTTILEUPGRADE sequence to paint heap bytes onscreen or abort...

CVE-2026-109242

FreeRDP versions prior to 3.0.0 and 3.6.0 (before 3.32.0 ) are vulnerable to an uninitialized heap disclosure via a progressive codec tile upgrade. The root cause is that the tile->current buffer is allocated without being zeroed out. A malicious RDP server can exploit this by sending a crafte...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed is a high-performance PoC scanner for CVE-2025-14847, a pre-authentication heap memory disclosure vulnerability in the MongoDB C++ Driver. The tool is designed for rapid identification of vulnerable instances across large network ranges. Technical Analysis The...

CVE-2026-3805-curl-SMB-UAF

CVE-2026-3805: Use-After-Free in curl SMB Connection Reuse I found a use-after-free vulnerability in libcurl's SMB protocol handler. When a second SMB transfer reuses an existing connection to the same server, the file path for the new request req-path is a dangling pointer to freed heap memory...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

Exploit for CVE-2025-46087

Feysbuk — HEIF Heist Laboratuvarı 🧪 !platformhttps://img.s...

OpenSSL 3.0.0 < 3.0.23 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.23 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way throug...

AZL-105483 CVE-2026-84782 affecting package edk2 20240524git3e722403cd16-20

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

PT-2026-109086

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

PT-2026-98227

Name of the Vulnerable Software and Affected Versions ESF-IDF version 5.5.5 ESF-IDF version 6.0.1 ESF-IDF version 6.1 Description The BlueDroid A2DP sink function btc a2dp sink handle inc media reads a timestamp field from the received media buffer without first validating that the packet layout...

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

CVE-2026-81882

The reverse engineering framework radare2 (prior to version 6.2.0 ) is vulnerable to an out-of-bounds read within its binary property-list Unicode parser. The parser fails to guarantee NUL termination and underallocates an uninitialized UTF-8 destination. When a local attacker executes the pFB or...