mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

MongoBleed-CVE-2025-14847

MongoBleed CVE-2025-14847 – Vulnerability Checker Systemhaus Schulz – Security Tools A professional-grade security scanner to detect the MongoBleed CVE-2025-14847 MongoDB memory disclosure vulnerability. Unlike simple version-check tools, this scanner uses a PoC-accurate probing technique , safel...

mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

CVE-2026-98170

A flaw was found in the Linux kernel's SMB client. When processing extended file attributes returned by a server, insufficient buffer validation allows the kernel to read data past the allocated boundaries. A malicious or compromised server could exploit this issue by returning a malformed...

CVE-2026-102164

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

CVE-2026-98167

A flaw was found in the Linux kernel's SMB client. When processing compound encrypted Protocol Data Units PDUs, the client incorrectly validates the length of individual messages within the compound frame. A malicious or compromised SMB server can exploit this flaw by returning truncated sub-PDUs...

CVE-2026-102164

Affected Arista access points are vulnerable when configured with VXLAN tunnelling and L2-proxy (specifically for the VESPA use-case ). A wireless client associated with the tunnelled SSID can send a crafted packet, triggering an out-of-bounds read (CWE-125) that causes the access point to reveal...

CVE-2026-102164 Security Advisory 0196

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

EUVD-2026-93966

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

CVE-2026-106395

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

cve-2025-5777

CitrixBleed2 - Escáner PoC para CVE-2025-5777 Este repositorio contiene un escáner avanzado de Prueba de Concepto PoC para CVE-2025-5777 , denominado CitrixBleed2 , una vulnerabilidad de divulgación de memoria que afecta a Citrix NetScaler ADC y Gateway. Realicé algunos cambios al PoC original;...

EUVD-2026-93761

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106273

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a high-severity issue involving an uninitialized resource in the Video component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to read memory outside the sandbox . No specific exploit...

CVE-2026-106231

Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource flaw in the Dawn component. A remote attacker can exploit this via a crafted HTML page to read memory outside the sandbox . The vulnerability is classified with a High security severity. No specific ex...

EUVD-2026-93802

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak PoC 📌 Description This script exploits a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway appliances, identified as CVE-2025-5777 dubbed CitrixBleed 2. It triggers a memory leak through the /p/u/doAuthentication.do endpoint,...