CVE-2025-14847

أداة الكشف عن ثغرة MongoDB CVE-2025-14847 أداة الكشف عن ثغرة تسرب الذاكرة في MongoDB CVE-2025-14847 ⚠️ تنبيه مهم: هذه الأداة مخصصة فقط لاختبارات الأمان المصرح بها وتقييم الثغرات. الاستخدام غير المصرح به قد يخالف القانون. 📋 المحتويات وصف الثغرة الميزات التثبيت طريقة الاستخدام إعداد بيئة الاختبار...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit per NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 è una critica lettura out-of-bounds non autenticata in Citrix NetScaler ADC/Gateway modalità Gateway o AAA vServer. Una singola richiesta artificiosa può scarica...

EUVD-2026-66454

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-80212

CVE-2026-80212 is a memory exhaustion vulnerability in the resolv gem before 0.7.2 for Ruby. The root cause is that Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create permanently register a new class for every unknown DNS resource rec...

CVE-2026-79771

A flaw was found in Nokogiri. Attackers can exploit a memory leak in the XSLT Stylesheet transform method by providing specially crafted input containing null bytes. This can lead to excessive memory consumption and enable a denial of service against long-running processes...

etherleak-checker

Etherleak-Schwachstellenprüfer Dieses Python-Skript hilft, die Etherleak-Schwachstelle CVE-2003-0001 auf einem Zielhost zu erkennen, indem es die Padding-Daten in Netzwerkpaketen analysiert. Das Skript verwendet Scapy, um verschiedene Arten von Anfragen ICMP, ARP oder TCP zu senden und prüft, ob...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

EUVD-2026-66470

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...

CVE-2026-47888

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

cve-2025-54874-poc

Riferimento https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Ambiente di Test openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Descrizione la catena di chiamate di funzioni è:...

CVE-2026-47888 Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-47888

CVE-2026-47888 affects the RSocketMessageHandler component of Spring Framework, where a malformed SETUP frame causes a memory leak in RSocket applications. The vulnerability is exploitable over the network with no privileges or user interaction required, leading to high availability impact (CVSS ...

EUVD-2026-66856

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...

CVE-2026-20805-POC

CVE-2026-20805 PoC Prova di concetto per la vulnerabilità di divulgazione di informazioni in Desktop Windows Manager dwm.exe di Microsoft. 📋 Riepilogo della Vulnerabilità ID: CVE-2026-20805 Prodotto: Microsoft Windows Componente: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensiti...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Rilevamento e sfruttamento automatici di vulnerabilità critiche di PHP CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh è uno strumento di valutazione della sicurezza a file singolo, zero configurazione che rileva automaticamente endpoint...

CVE-2026-59295

A flaw was found in Micrometer Instrumentation for Apache HttpAsyncClient. When asynchronous requests fail before receiving a response, such as due to connection resets or timeouts, the system can leak memory unboundedly. This continuous memory leak leads to heap exhaustion and OutOfMemoryError...