CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Автор: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ ТОЛЬКО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЕЙ Лабораторная среда и эксплойт-скрипт для критической уязвимости неаутентифицированной утечки памяти в MongoDB Server. 📋 Содержание Обзор уязвимости Затронутые версии Установка Лабораторная...

Mongobleed-Detector-CVE-2025-14847

Сканер MongoBleed Профессиональный сканер уязвимостей для CVE-2025-14847 MongoBleed — уязвимость утечки памяти MongoDB. +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak Vulnerability |...

Palimpsest

CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed — это высокопроизводительный PoC-сканер для CVE-2025-14847, уязвимости раскрытия памяти в куче до аутентификации в MongoDB C++ Driver. Инструмент предназначен для быстрого выявления уязвимых экземпляров в больших сетевых диапазонах. Технический анализ Уязвимос...

CVE-2026-3805-curl-SMB-UAF

CVE-2026-3805: Use-After-Free при переиспользовании SMB-соединений curl Я обнаружил уязвимость типа use-after-free в обработчике протокола SMB в libcurl. Когда вторая SMB-передача переиспользует существующее соединение с тем же сервером, путь к файлу для нового запроса req-path является висячим...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

Exploit for CVE-2025-46087

Feysbuk — HEIF Heist Laboratuvarı 🧪 !platformhttps://img.s...

OpenSSL 3.0.0 < 3.0.23 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.23 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way throug...

AZL-105483 CVE-2026-84782 affecting package edk2 20240524git3e722403cd16-20

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

PT-2026-98227

Name of the Vulnerable Software and Affected Versions ESF-IDF version 5.5.5 ESF-IDF version 6.0.1 ESF-IDF version 6.1 Description The BlueDroid A2DP sink function btc a2dp sink handle inc media reads a timestamp field from the received media buffer without first validating that the packet layout...

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

EUVD-2026-84470

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

CVE-2026-81882

The reverse engineering framework radare2 (prior to version 6.2.0 ) is vulnerable to an out-of-bounds read within its binary property-list Unicode parser. The parser fails to guarantee NUL termination and underallocates an uninitialized UTF-8 destination. When a local attacker executes the pFB or...

CVE-2026-81882: Out-of-bounds Read

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...

DEBIAN-CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

DEBIAN-CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

UBUNTU-CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

UBUNTU-CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...