CVE-2014-0160

CVE-2014-0160 Lab setup using Heartbleed to leak memory from webapps This repo focuses on building a container to create an environment that can easily exploit nginx using the Heartbleed technique, focusing on: Setting up the environment using Docker Server setup diagram Demo steps Server diagram...

drmemory

Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

CVE-2016-6415-BenignCertain-Monitor

CVE-2016-6415-BenignCertain-Monitor Re-implementation of VirtueSecurity's benigncertain-monitor. Doesn't have all the same payload options as the original, but replaces the bc-id binary with a better proof of concept by Ross Bradley that can be expanded on if necessary. Credits: Original monitor...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

EUVD-2026-119271

libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknowntoUtf8 and unknowntoUtf16 in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer...

CVE-2026-124317

The libexpat library, version 2.10.0 and prior, contains an out-of-bounds read vulnerability within the unknown_toUtf8() and unknown_toUtf16() functions in xmltok.c. This issue occurs when the library processes application-registered unknown encodings, specifically when an attacker provides a doc...

CVE-2025-14177

CVE-2025-14177 — PHP getimagesize Heap Memory Leak For authorized penetration testing and security research only. Vulnerability Field| Value ---|--- CVE| CVE-2025-14177 CWE| CWE-524 Use of Uninitialized Resource Severity| MODERATE — CVSS 6.3 Root cause| phpreadstreamallchunks writes successive...

CVE-2026-99279 ksmbd: reclaim ended sessions on logoff and expiration

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory and connection slots when no further setu...

CVE-2026-99279

The Linux kernel 's ksmbd component is vulnerable to a memory and connection slot retention issue. When sessions are logged off or replaced, they can remain in an Expired state with zero credential expiry, causing them to hold onto memory and connection slots indefinitely if no new setup occurs o...

EUVD-2026-119283

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory and connection slots when no further setu...

CVE-2023-4966

CVE-2023-4966 Exploit Script CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit Usage: usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

shodanwave

Shodanwave Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online. What does the tool to? Look, a list! Search Brute force SSID and WPAPSK Password...

CVE-2022-0853

CVE-2022-0853 CVE-2022-0853 A memory leak on the jboss client side, when using UserTransaction repeatedly. Such as: private void testTransaction throws Exception forint i=1; i 500000; i++ System.out.println"Starting process " + i; // get the UserTransaction and EJB Proxy Context ctx =...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit for NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 is a critical unauthenticated out-of-bounds read in Citrix NetScaler ADC/Gateway Gateway or AAA vServer mode. A single crafted request can dump memory containing...

CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free()

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvifstartxmit, while adds/removes happ...

CVE-2026-112336

Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...