CVE-2025-27840-WIP

CVE-2025-27840-WIP Un travail en cours pour CVE-2025-27840 Présentation de CVE-2025-27840 CVE-2025-27840 est une vulnérabilité de sévérité moyenne CVSS 6.8 affectant les puces Bluetooth ESP32 d'Espressif, intégrées dans plus d'un milliard d'appareils IoT dans le monde. La faille implique 29...

cheat-engine-undetectable

Cheat Engine Indétectable Édition Recherche Académique — Cheat Engine modifié avec contournement anti-triche multi-niveaux pour l'éducation en cybersécurité et la recherche en rétro-ingénierie de niveau universitaire. Avertissement : Ce projet est exclusivement destiné à la recherche académique,...

evil-mhyprot-cli

evil-mhyprot-cli Une preuve de concept PoC pour le pilote vulnérable Mhyprot2.sys permettant la lecture/écriture de mémoire en mode noyau/utilisateur via un processus utilisateur non privilégié. libmhyprot Wiki Aperçu Ce que nous pouvons faire avec cette CLI est le suivant : Lire/écrire n'importe...

CVE-2026-106433

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106433 Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-106433

Improper state management in MongoDB libmongocrypt allows for heap corruption when cleaning up a key document that contains duplicate masterKey fields. This flaw causes provider-specific data to be treated as an incompatible type, leading to invalid memory access and invalid frees in the client p...

Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...

CVE-2026-25589-25588-25243-23631-23479-REDIS

GUIDE DE TEST & CORRECTION DES 5 CVE REDIS AU 08.05.2026 Date de publication : 2026-05-08 Auteur : TonyCao [email protected] Source : Redis Security Advisory TABLE DES MATIÈRES 1. Vue d'ensemble 2. Versions affectées 3. Détails de chaque CVE CVE-2026-23479 — Use-after-free dans le flux de...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Guide Complet ⚠️ Juste pour Apprendre, Pas pour Hacker ; ⚠️ Salut ! C'est un outil simple que j'ai créé pour aider les gens à vérifier si leurs serveurs Redis sont vulnérables à ce bug. Ce n'est pas destiné à de vraies attaques - juste pour apprendre et protéger vos...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...

CVE-2026-15819

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator...

EUVD-2026-95011

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...

EUVD-2026-94972

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator...

CVE-2026-15819

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds write . This issue is caused by a strict-weak-ordering violation within a sorting comparator, which could allow a remo...

CVE-2026-98365

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA software driver. An unauthenticated remote attacker can cause a Denial of Service DoS or out-of-bounds memory access by sending specially crafted network requests that trigger an integer overflow during memory range validatio...

CVE-2021-3656-Demo

CVE-2021-3656: تحدث هذه المشكلة بسبب غياب التحقق من حقل virtext في VMCB، وتسمح لضيف L1 خبيث بتعطيل كل من اعتراضات VMLOAD/VMSAVE وVLS Virtual VMLOAD/VMSAVE لضيف L2. في ظل هذه الظروف، يمكن لضيف L2 تشغيل VMLOAD/VMSAVE دون اعتراض، وبالتالي قراءة/كتابة أجزاء من الذاكرة الفعلية للمضيف. إعداد البيئة...

CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

CVE-2026-87726

The NXP NXPNfcRdLib software (versions RC663 through 07.14.00_Pub ) contains a vulnerability in the phalFelica component due to insufficient API bounds checking . This flaw may allow an attacker with high privileges or an untrusted third party to access unintended memory regions, potentially resu...

CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...