bleeding-heart

Heartbleed Heartbleed 漏洞 CVE-2014-0160 是 OpenSSL 库中的一个严重实现缺陷，攻击者可借此从受害服务器的内存中窃取数据。窃取的数据内容取决于服务器内存中已有的内容，可能包含私钥、TLS 会话密钥、用户名、密码、信用卡信息等。该漏洞存在于 SSL/TLS 用于保持连接活跃的心跳（Heartbeat）协议的实现中。 受影响的 OpenSSL 版本范围为 1.0.1 至 1.0.1f。Ubuntu 虚拟机中的版本为 1.0.1。 Heartbleed...

ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

A flaw was found in ws, an open source WebSocket client and server for Node.js. The websocket.close implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memor...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - 功能型 PoC MongoDB 内存泄露利用 - 模拟 R6 攻击 CVE-2025-14847 MongoBleed 的完整概念验证 已测试：✅ MongoDB 7.0.5 | 14.300+ 次成功利用 | 4 个 UUID 泄露 🎯 关于本项目 本仓库包含一个功能完整的概念验证（PoC） ，针对漏洞 CVE-2025-14847 ，也称为 MongoBleed ——MongoDB 中一个严重的预认证堆内存泄露缺陷。 背景：彩虹六号：围攻 事件 在 2025 年 12 月 ，游戏《彩虹六号：围攻》遭受了一次大规模攻击，约...

mongobleed

mongobleed CVE-2025-14847 是针对 MongoDB 通过 OPCOMPRESSED 缓冲区过度读取（buffer over-read）导致堆内存泄露的漏洞利用工具。 用法 root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: Marco de Explotación RFCOMM Bluetooth "Heartbleed" CVE-2025-13834 Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha: 20 de enero de 2026 Versión: 1.0 Réplica a nivel de sistema completo Licencia: SOLO USO EN RED TEAM N...

CVE-2026-7482

🚨 CVE-2026-7482：Ollama 中的堆缓冲区越界读取 📝 描述 CVE-2026-7482 标识了 Ollama （一个用于运行本地语言模型的开源框架）中 /api/create 和 /api/push 端点存在的一个严重的堆缓冲区越界读取 （ Heap Buffer Over-Read ）漏洞。 该漏洞允许远程未认证攻击者泄露进程内存 ，暴露敏感数据，例如： API 密钥和认证令牌 环境变量 系统提示词 并发用户的机密数据 🔴 影响： 进程内存完全泄露 ，可能窃取组织的关键信息。 🔍 技术分析 🎯 利用机制 1. 操纵恶意 GGUF 文件 攻击者发送一个 GGUF...

postgresql16-postgis security update

An update is available for postgresql16-postgis. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostGIS adds support for geographic objects to the PostgreSQL...

RLSA-2026:65899 Important: postgresql16-postgis security update

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

RockyLinux 10 : postgresql16-postgis (RLSA-2026:65899)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65899 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...

RHEL 8 : freerdp (RHSA-2026:66282)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66282 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service...

Linux Distros Unpatched Vulnerability : CVE-2026-73324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controll...

CVE-2026-22590

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

CVE-2026-22590

eProsima Fast DDS (a C++ implementation of the OMG DDS standard) has a remotely triggerable Out-of-Bounds Read in its RTPS DATA_FRAG submessage processing. An attacker can craft a DATA_FRAG with a large sampleSize but a small actual payload, and set fragmentsInSubmessage so the receiver takes the...

CVE-2026-22590 Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...

Important: Red Hat Security Advisory: postgresql16-postgis security update

An update for postgresql16-postgis is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer

A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...

CVE-2026-18238

A flaw was found in libpcap. The rpcap client code, which processes RPCAPMSGPACKET messages from a server, incorrectly validates its headers. A malicious server could exploit this vulnerability by sending a specially crafted message, causing the client to read up to 20 bytes of memory beyond its...