Exploit for Heap-based Buffer Overflow in F5 Nginx_Gateway_Fabric

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE...

nginx-cve-2026-42945-check

Script de verificación local para NGINX CVE-2026-42945 Idioma: 中文 | English Este repositorio proporciona dos scripts de verificación local para inspeccionar en servidores Linux / Windows si Nginx, OpenResty o Tengine presentan riesgos relacionados con CVE-2026-42945. Los scripts solo realizan...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

Orthanc DICOM Server

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. 2...

CVE-2026-42945

CVE-2026-42945: NGINX Rift Heap Buffer Overflow Vulnerability Overview CVE-2026-42945 is a critical heap buffer overflow vulnerability in the NGINX server, known as "NGINX Rift". The vulnerability exists in the processing logic of the rewrite and set directives in NGINX. When specific configurati...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Autor: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ SOLO CON FINES EDUCATIVOS Entorno de laboratorio y script de explotación para la vulnerabilidad crítica de fuga de memoria no autenticada en MongoDB Server. 📋 Tabla de Contenidos Resumen de la Vulnerabilidad Versiones...

CVE-2025-49844

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...

google-chrome-emergency-update

Chrome Emergency Security Update This repository contains information and tools related to Google's emergency Chrome update addressing critical security vulnerabilities. 🚨 Emergency Update Notice Google has issued an emergency Chrome update to patch critical zero-day vulnerabilities being activel...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Prueba de concepto de UAF en Redis Use-After-Free en RedisunblockClientOnKey que conduce a ejecución remota de código Prueba de concepto con explotación asistida por GDB solo uso educativo/de laboratorio 📖 Descripción general CVE-2026-23479 es una vulnerabilidad crítica de...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner Un escáner de diagnóstico basado en Python para el desbordamiento de búfer del servidor web VPN de Cisco ASA / FTD CVE-2025-20333. CVE-2025-20333 es una vulnerabilidad crítica de desbordamiento de búfer en el montón heap-based buffer overflow en el manejador de carga de...

CVE-2026-65349

CVE-2026-65349 — getattrlist OOB Write in vfsattrpackinternal Component: XNU VFS — vfsattrpackinternal getattrlist syscall Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds write to caller buffer Impact: Kernel heap corruption; from kernel conte...

Exploit for Use After Free in Linux Linux_Kernel

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...