CVE-2025-14847

CVE-2025-14847 Entorno de vulnerabilidad CVE-2025-14847 con un PoC incluido https://jira.mongodb.org/browse/SERVER-115508 RESUMEN Esta es una corrección crítica para abordar CVE-2025-14847. Actualice a 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 o 4.4.30. DESCRIPCIÓN DEL PROBLEMA E IMPACTO Una...

CVE-2026-89779

A slab-out-of-bounds read in the Linux kernel's ntfs3 filesystem driver occurs when a crafted NTFS image contains an Extended Attribute (EA) record with a mismatched ef->size and elength. The function ntfs_read_ea() in fs/ntfs3/xattr.c validates only that the record fits in the remaining buffe...

CVE-2026-89779 fs/ntfs3: validate ef->size covers the record's name and value

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...

heaplens

🔎 Heaplens CMPT733 Cybersecurity Lab II Project 📂 Repo Structure root@kitploit: . ├── README.md ├── heaplens.png ├── heaplens.py ├── logs │ ├── sudoedit-.txt │ └── ... └── tests ├── Makefile ├── env-in-heap └── ... README.md: right here! heaplens.py: the main script logs/: contains some sample...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

mongobleed-scanner

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily 🚀 Getting Started Welcome to mongobleed-scanner! This tool helps you discover vulnerabilities in MongoDB related to heap memory leaks. Protect your data and enhance your security effortlessly. 📥 Download the Application Visit this pag...

cve-2025-5777

CitrixBleed2 - CVE-2025-5777 PoC Scanner This repository contains an advanced Proof of Concept PoC scanner for CVE-2025-5777 , dubbed CitrixBleed2 , a memory disclosure vulnerability affecting Citrix NetScaler ADC and Gateway. I did some changes to the original poc, this script is based on resear...

CVE-2026-91946

A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...

CVE-2026-91963

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

CVE-2014-4140

Some rough notes 0:007 u MSHTML!CHtmRootParseCtx::AddText+0x104: 6efff0a5 8b8e88000000 mov ecx,dword ptr esi+88h 6efff0ab 898d70ffffff mov dword ptr ebp-90h,ecx 6efff0b1 8945ac mov dword ptr ebp-54h,eax 6efff0b4 8b5118 mov edx,dword ptr ecx+18h 6efff0b7 8bca mov ecx,edx 6efff0b9 83e103 and ecx,3...

CVE-2026-54251 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

CVE-2026-91963

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB transfers to read uninitialized heap memory from the client, defeating ASLR and enabling remote code execution when...

CVE-2026-91946

FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function...

xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

CVE-2025-14177

CVE-2025-14177 — Fuga de memoria en el heap de PHP getimagesize Solo para pruebas de penetración autorizadas e investigación de seguridad. Vulnerabilidad...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

CVE-2026-90927 filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message

filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenticated users to buffer arbitrarily large messages. Attackers can send oversized WebSocket messages to exhaust server heap memory and cause denial of service...

CVE-2026-15892

The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...

CVE-2026-15892 Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service

The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...

CVE-2026-15892 Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service

The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...