12346 matches found
CVE-2026-98582
A flaw was found in the Linux kernel's ST21NFCA Near Field Communication NFC driver. The driver fails to properly validate the length of received frames when processing escape sequences. An attacker capable of sending crafted NFC frames could exploit this vulnerability to trigger an out-of-bounds...
CVE-2026-98575
A flaw was found in the Linux kernel's PN533 NFC Near Field Communication driver. An attacker capable of connecting a malicious or malfunctioning USB device can supply a crafted response frame with an arbitrary data length value. Because the driver fails to validate this length against maximum...
CVE-2025-5777
Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...
EUVD-2026-104726
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory...
CVE-2025-5777
CVE-2025-5777 AKA CitrixBleed 2 Is an OOB read in the login process of Citrix Gateway. This is a Proof of Concept exploiting the OOB CVE-2025-5777 to obtain memory data from a vulnerable Citrix Gateway instance, possibly leading to cookies/credentials theft. Usage I highly recommend using a venv...
CVE-2026-86940
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory...
CVE-2026-86940
In macOS Golden Gate 27 , a vulnerability exists that could allow an application to disclose kernel memory . This issue was addressed by removing the vulnerable code . No specific exploits or in-the-wild exploitation details are provided in the documents.
Heartbleed_Dockerfile_with_Nginx
Testing Heartbleed with Nginx Dockerfile This repository contains Dockerfile of Nginx with the vulnerable OpenSSL version 1.0.1f for testing CVE-2014-0160 Heartbleed Vulnerability. Base Docker Image debian:latest Installation 1. Install Docker Example with Debian: apt-get install -y docker 2...
CVE-2026-112896
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved...
EUVD-2026-104658
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved...
mongobleed
mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...
CVE-2016-6415-BenignCertain-Monitor
CVE-2016-6415-BenignCertain-Monitor Re-implementation of VirtueSecurity's benigncertain-monitor. Doesn't have all the same payload options as the original, but replaces the bc-id binary with a better proof of concept by Ross Bradley that can be expanded on if necessary. Credits: Original monitor...
heartbleed-PoC
Heartbleed PoC A sample example of the Heartbleed attack using the server https://www.cloudflarechallenge.com/ made for trying this attack. First, the two best explanations I read on the subject : http://www.seancassidy.me/diagnosis-of-the-openssl-heartbleed-bug.html http://xkcd.com/1354/ Exploit...
heartbleed
Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...
mongobleed-exploit-CVE-2025-14847
š©ø MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure CVE-2025-14847 , dubbed MongoBleed , allows unauthenticated remote attackers to exfiltrate uninitialised heap memory by exploiting MongoDB's zlib decompression logic. This...
mongobleed-exploit-CVE-2025-14847
š©ø MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure š Full Documentation ā¢ š¬ Technical Analysis ā¢ ā” Quick Commands šÆ CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...
Ticketbleed
Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD cd Ticketbleed mv...
WebKit-CVE-2016-4622
WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...
CVE-2025-14847_Expolit
MongoBleed-Pro ā ļø Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju š„ About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...
rndis-co
RNDIS-CO Summary The RNDIS USB Gadget may be exploited to dump contents of kernel memory space via packet filter update mechanism. Description The RNDISMSGSET usb control transfer request handler - rndissetresponse calls genndissetresp passing a buffer pointer offset by BufOffset + 8. The BufOffs...