WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed MongoDB zlib Compression Memory Disclosure — Analysis, Detection, and Remediation Overview CVE-2025-14847, commonly referred to as MongoBleed , is a high-severity information disclosure vulnerability affecting :contentReferenceoaicite:0index=0 Server. The vulnerability...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Memory Disclosure Vulnerability in Citrix NetScaler / ADC 📌 1. Executive Summary CitrixBleed 2 refers to a critical memory disclosure vulnerability affecting: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 Internet-facing VPN appliances It allows unauthenticated...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak Exploit 📌 Overview This tool demonstrates CVE-2025-5777 , a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway devices. The exploit leaks sensitive memory contents via malformed authentication requests. Key Features: ✔ Memory leak...

MongoBleed-CVE-2025-14847

MongoBleed CVE-2025-14847 – Vulnerability Checker Systemhaus Schulz – Security Tools A professional-grade security scanner to detect the MongoBleed CVE-2025-14847 MongoDB memory disclosure vulnerability. Unlike simple version-check tools, this scanner uses a PoC-accurate probing technique , safel...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

heartbleed-PoC

Heartbleed PoC A sample example of the Heartbleed attack using the server https://www.cloudflarechallenge.com/ made for trying this attack. First, the two best explanations I read on the subject : http://www.seancassidy.me/diagnosis-of-the-openssl-heartbleed-bug.html http://xkcd.com/1354/ Exploit...

Ticketbleed

Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD root@kitploit: cd Ticketbleed mv...

bleeding-heart

Heartbleed The Heartbleed bug CVE-2014-0160 is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private...

CVE-2016-6415-BenignCertain-Monitor

CVE-2016-6415-BenignCertain-Monitor Re-implementation of VirtueSecurity's benigncertain-monitor. Doesn't have all the same payload options as the original, but replaces the bc-id binary with a better proof of concept by Ross Bradley that can be expanded on if necessary. Credits: Original monitor...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure CVE-2025-14847 , dubbed MongoBleed , allows unauthenticated remote attackers to exfiltrate uninitialised heap memory by exploiting MongoDB's zlib decompression logic. This...

vaas-cve-2014-0160

Vulnerabilidad como Servicio - CVE 2014-0160 Un sistema Linux Debian Wheezy con una versión vulnerable de libssl y openssl y un servidor web para mostrar CVS-2014-0160, también conocido como Heartbleed. Resumen Este contenedor Docker está basado en Debian Jessie y ha sido modificado para usar una...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak PoC 📌 Description This script exploits a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway appliances, identified as CVE-2025-5777 dubbed CitrixBleed 2. It triggers a memory leak through the /p/u/doAuthentication.do endpoint,...

Heartbleed_Dockerfile_with_Nginx

Probando Heartbleed con Dockerfile de Nginx Este repositorio contiene el Dockerfile de Nginx con la versión vulnerable OpenSSL 1.0.1f para probar la vulnerabilidad CVE-2014-0160 Heartbleed. Imagen Base Docker debian:latest Instalación 1. Instala Docker Ejemplo con Debian: apt-get install -y docke...

CVE-2026-14668

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

CVE-2026-69242

A flaw was found in libvips. A crafted many-band TIFF image, when processed by libvips, can bypass scanline validation and trigger an integer overflow. This overflow leads to a heap buffer overflow, allowing an attacker to access arbitrary memory locations with negative offsets. This can result i...

heartbleed-lab

Heartbleed Lab Educational laboratory for studying the Heartbleed vulnerability CVE-2014-0160 using a real vulnerable OpenSSL environment inside Docker. This project reproduces a vulnerable TLS server using OpenSSL 1.0.1f and implements a custom raw TLS heartbeat client to demonstrate how malform...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

mongobleed

MongoDB Compression Leak Lab Safe, Educational Reference CVE : CVE-2025-14847 This repository is an educational lab that demonstrates the concept behind a class of issues often described as “compression framing / size-metadata memory disclosure” in database wire protocols. It is written to suppor...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...