CVE-2016-6415-BenignCertain-Monitor

CVE-2016-6415-BenignCertain-Monitor Re-implementation of VirtueSecurity's benigncertain-monitor. Doesn't have all the same payload options as the original, but replaces the bc-id binary with a better proof of concept by Ross Bradley that can be expanded on if necessary. Credits: Original monitor...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2026-14668

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

CVE-2026-69242

A flaw was found in libvips. A crafted many-band TIFF image, when processed by libvips, can bypass scanline validation and trigger an integer overflow. This overflow leads to a heap buffer overflow, allowing an attacker to access arbitrary memory locations with negative offsets. This can result i...

heartbleed-lab

مختبر Heartbleed مختبر تعليمي لدراسة ثغرة Heartbleed CVE-2014-0160 باستخدام بيئة OpenSSL ضعيفة حقيقية داخل Docker. يعيد هذا المشروع إنتاج خادم TLS ضعيف باستخدام OpenSSL 1.0.1f وينفّذ عميل TLS heartbeat خامًا مخصصًا لتوضيح كيف يمكن لحزم heartbeat المشوّهة أن تؤدي إلى كشف الذاكرة. أُنشئ المختبر...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed पायथन फ़ाइल CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 सारांश यह CVE-2025-14847 को संबोधित करने के लिए एक महत्वपूर्ण सुधार है। 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, या 4.4.30 में अपग्रेड करें। समस्या विवरण और...

mongobleed

MongoDB Compression Leak Lab Safe, Educational Reference CVE : CVE-2025-14847 This repository is an educational lab that demonstrates the concept behind a class of issues often described as “compression framing / size-metadata memory disclosure” in database wire protocols. It is written to suppor...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CVE-2025-5777

CVE-2025-5777 के लिए एक्सप्लॉइट: Citrix NetScaler मेमोरी डिस्क्लोज़र CitrixBleed 2 T1606 अस्वीकरण केवल अधिकृत उपयोग के लिए अभिप्रेत है। उपयोग से पहले प्राधिकरण सत्यापित करना आपकी ज़िम्मेदारी है। इसका उपयोग करने के लिए आपके विरुद्ध दायर किसी भी कानूनी या आपराधिक कार्यवाही के लिए मैं ज़िम्मेदार नही...

RHEL 10 : freerdp (RHSA-2026:61378)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61378 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Linux Distros Unpatched Vulnerability : CVE-2022-51000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via...

slides

Slide Conferenza| Anno| Nome| Descrizione ---|---|---|--- Zer0Con| 2023| CodeQL + DTrace = 💧🐞 in XNU| Come trovare multiple divulgazioni di memoria in XNU usando CodeQL...

ALPINE-CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Sviluppato da m10sec. Questo script rileva automaticamente la versione di Nginx su un server remoto e valuta se è vulnerabile a falle di sicurezza note, in particolare: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corruzione della memoria in...

PT-2026-83068

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An attacker with valid credentials can send an invalid IMAP URLFETCH command, causing the system to include uninitialized memory in the error response returned to the client. This can lead to the...

CVE-2026-81574

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

EUVD-2026-66981

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1679:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1679:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...