SUSE SLES15 Security Update : kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3707-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3707-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues: The following security issues were fixed:...

mongobleed

mongobleed CVE-2025-14847 Exploit für die Offenlegung von MongoDB-Heap-Speicher durch Puffer-Overread bei OPCOMPRESSED. Verwendung root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017...

MongoDeepDive

🌊 MongoDeepDive Exploit del protocollo wire MongoDB sensibile al contesto CVE-2025-14847 Analizzatore euristico avanzato per operazioni Red Team 💀 Panoramica MongoDeepDive è uno scanner asincrono ad alte prestazioni e un analizzatore forense progettato per rilevare perdite di memoria non...

DEBIAN-CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Autor: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ NUR ZU BILDUNGSZWECKEN Laborumgebung und Exploit-Skript für die kritische, nicht authentifizierte Speicherleck-Schwachstelle in MongoDB Server. 📋 Inhaltsverzeichnis Schwachstellenübersicht Betroffene Versionen Installation...

CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

CVE-2026-79771

Nokogiri versions before 1.19.3 are affected by a memory leak in the XSLT Stylesheet transform method. The root cause is heap allocations leaking when Ruby strings containing null bytes are passed as transform parameters. An unauthenticated, network-based attacker can trigger this by supplying cr...

CVE-2026-79771 Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

EUVD-2026-65529

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

CVE-2026-79771 Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

EUVD-2021-34866

Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...

CVE-2021-47996

Nokogiri before 1.11.4 (CRuby implementation, when using the bundled/vendored libxml2) ships libxml2 2.9.10 , which carries multiple known flaws later fixed in libxml2 2.9.12. These include a memory leak in xmlSchemaValidateStream (CVE-2019-20388), a global buffer over-read in xmlEncodeEntitiesIn...

CVE-2026-74678

A flaw was found in the Linux kernel's ax88179178a USB network driver. When the network interface has scatter-gather SG enabled and a packet linearization operation fails, the system fails to free the associated memory buffer. This oversight leads to a memory leak, which could be exploited by an...

CVE-2026-74622

A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

mongobleedburp

Estensione Burp MongoBleed Estensione di Burp Suite per rilevare CVE-2025-14847 MongoBleed tramite test di leak manuali da una scheda UI dedicata. Repository: https://github.com/j0lt-github/mongobleedburp Versione attuale: 1.1.0 Funzionalità Scheda UI per test manuali con host/porta e offset...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Obiettivo L'obiettivo di questo progetto era valutare un host remoto per la vulnerabilità Heartbleed CVE-2014-0160, verificarne la presenza e sfruttarla per estrarre potenziali informazioni sensibili dalla memoria del server tramite il protocollo TLS. Esecuzione 1. Identificazione dei servizi...

ctf

Cose relative al CTF Indice Le sfide sono collegate nella tabella seguente. Descrizione| Evento/Gioco| Soluzione ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| Un eseguibile con una funzionalità di "login" con la password in testo semplice nella memoria. Blackbox| Level 2| Un eseguibile...

intel-me-research

Reverse Engineering del Firmware Intel ME — Analisi Live di CSME 16.x "Il tuo computer contiene un secondo computer segreto. Lo abbiamo trovato, mappato e documentato ciò che si nasconde al suo interno." 🔥 PROVALO TU STESSO — HECI SPY 🔥 Uno script Python. Zero dipendenze. Parla direttamente con i...

CVE-2025-50422

Poppler prima della versione 25.04.0 Quando pdftocairo renderizza un PDF dannoso e chiama cairodebugresetstaticdata all'uscita, la memoria heap contenente i flussi di oggetti PDF non viene cancellata correttamente. Un attaccante con accesso locale può scaricare la memoria di processo e recuperare...