heartbleed

HEARTBLEED : VULNERABILITÀ HEARTBEAT DI OpenSSL TLS Estensione Heartbeat di OpenSSL TLS - Divulgazione di memoria - Scanner e exploit della vulnerabilità per versioni SSL/TLS multiple necessario: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre...

CVE-2021-38304-PoC

CVE-2021-38304 Prova di concetto Panoramica Questa repository contiene una prova di concetto per una vulnerabilità di sicurezza critica nelle versioni precedenti del driver nipalk.sys di National Instruments. La vulnerabilità consente l'esecuzione arbitraria di codice e la divulgazione di memoria...

cve-2025-5777

CitrixBleed2 - Scanner PoC para CVE-2025-5777 Este repositório contém um scanner avançado de Prova de Conceito PoC para a CVE-2025-5777 , apelidada de CitrixBleed2 , uma vulnerabilidade de divulgação de memória que afeta o Citrix NetScaler ADC e Gateway. Fiz algumas alterações no PoC original; es...

CVE-2026-81574

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

CVE-2025-54574-Squid-Heap-Buffer-Overflow

CVE-2025-54574-Squid-Heap-Buffer-Overflow Vulnerabilità trovata su Squid Proxy. CVE-2025-54574 — Overflow critico del buffer heap in Squid Proxy Questo repository documenta il processo di scoperta, analisi e divulgazione responsabile di CVE-2025-54574, un overflow critico del buffer heap in Squid...

EUVD-2026-66981

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Fortgeschrittenes MongoDB Memory-Leak-Exploit-Tool Lerne weiter | Hacke weiter mit Alexcyberx 🔥 Über MongoBleed-Pro ist ein fortgeschrittenes Exploitation-Tool für CVE-2025-14847 , eine kritische Speicher-Offenlegungs-Schwachstelle in der zlib-Komprimierungsverarbeitung von...

CVE-2026-7482

🚨 CVE-2026-7482: Heap Buffer Over-Read in Ollama 📝 Descrizione Il CVE-2026-7482 identifica una vulnerabilità critica di lettura fuori dai limiti nell'heap Heap Buffer Over-Read negli endpoint /api/create e /api/push di Ollama , un framework open source per eseguire modelli linguistici locali...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed – CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 Hoch | Nicht authentifizierte Speicher-Offenlegung 📖 Vollständige Dokumentation • 🔬 Technische Analyse • ⚡ Schnellbefehle 🎯 CVE-2025-14847 Zusammenfassung MongoBleed ist eine kritische Speicher-Offenlegungsschwachstelle...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Strumento avanzato per lo sfruttamento delle perdite di memoria di MongoDB Continua ad imparare | Continua a hackerare con CyberTechAjju 🔥 Descrizione MongoBleed-Pro è uno strumento di sfruttamento avanzato per CVE-2025-14847 , una vulnerabilità critica di divulgazione della...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...

CVE-2026-78969

A flaw was found in Google Chrome. An uninitialized resource in the Video component could allow a remote attacker to read sensitive information. This can be achieved by tricking a user into visiting a specially crafted HTML page, potentially leading to unauthorized data access within the browser'...

CVE-2026-79270

A flaw was found in chromium-browser. A remote attacker could exploit an uninitialized resource vulnerability in ANGLE by crafting a malicious HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox...

CVE-2026-80543

CVE-2026-80543 affects the Linux kernel on s390 architectures, specifically the s390/zcrypt subsystem. The vulnerable functions xcrb_msg_to_type6cprb_msgx() and xcrb_msg_to_type6_ep11cprb_msgx() copy a user-space message into a kernel buffer based on its length, but subsequent processing requires...

CVE-2026-80543 s390/zcrypt: Pad trailing CCA or EP11 message with zeros

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...

CVE-2025-5777

CVE-2025-5777 auch bekannt als CitrixBleed 2 ist ein OOB-Read im Anmeldeprozess von Citrix Gateway. Dies ist ein Proof of Concept, der den OOB CVE-2025-5777 ausnutzt, um Speicherdaten von einer anfälligen Citrix Gateway-Instanz zu erlangen, was möglicherweise zum Diebstahl von...

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:59496 Important: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093180 advisory. The pngconverttorfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive...