mongobleed

mongobleed CVE-2025-14847 - استغلال تسريب ذاكرة MongoDB دون مصادقة استغلال إثبات مفهوم لثغرة فك ضغط zlib في MongoDB تتيح للمهاجمين غير المصادق عليهم تسريب ذاكرة حساسة من الخادم. الثغرة خلل في فك ضغط رسائل zlib في MongoDB يُرجع حجم المخزن المؤقت المُخصَّص بدلاً من طول البيانات المفكوك ضغطها الفعلي...

CVE-2025-5777

CVE-2025-5777 - Exploitation de fuite de mémoire Citrix NetScaler 📌 Aperçu Cet outil démontre CVE-2025-5777 , une vulnérabilité critique de divulgation mémoire dans les appareils Citrix NetScaler ADC/Gateway. L'exploitation divulgue des contenus mémoire sensibles via des requêtes d'authentificati...

CVE-2014-0160

CVE-2014-0160 مختبر بناء مختبر باستخدام Heartbleed لتسريب ذاكرة تطبيقات الويب يركز هذا المستودع على بناء حاوية لإنشاء بيئة سهلة لاستغلال nginx باستخدام تقنية Heartbleed مع التركيز على: بناء البيئة باستخدام Docker مخطط إعداد الخادم خطوات العرض التوضيحي مخطط الخادم تظهر مشكلة CVE-2014-0160 عندما تو...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

drmemory

डॉ. मेमोरी: मेमोरी डीबगर डॉ. मेमोरी के बारे में डॉ. मेमोरी एक मेमोरी निगरानी उपकरण है जो मेमोरी से संबंधित प्रोग्रामिंग त्रुटियों की पहचान करने में सक्षम है जैसे कि अप्रारंभिक मेमोरी तक पहुंच, अप्राप्य मेमोरी तक पहुंच आवंटित हीप इकाइयों के बाहर और हीप अंडरफ्लो तथा ओवरफ्लो सहित, मुक्त की गई मेमोरी...

meltdown-exploit

MELTDOWN EXPLOIT POC Spekulative Optimierungen führen Code auf unsichere Weise aus und hinterlassen Datenspuren in der Mikroarchitektur, z. B. im Cache. Lipp et al. 2018 veröffentlichten ihren Code am 09.01.2018 unter https://github.com/IAIK/meltdown. Details finden Sie in ihrem Paper:...

CVE-2026-80588

CVE-2026-80588 affects the Linux kernel mptcp (Multipath TCP) subsystem. After commit 9db5b3cec4ec introduced borrowing of forward memory from subflows, errors in the receive path prior to queueing skbs into the receive queue no longer trigger forward-allocated memory reclaiming. This can cause f...

CVE-2026-80571

CVE-2026-80571 affects the Linux kernel on powerpc/pseries systems, specifically the papr-phy-attest driver. In the function papr_phy_attest_create_handle() , the field params->cmd.length is not validated before use, which can result in a buffer overflow . The driver also fails to free params ...

CVE-2026-80555

This vulnerability affects the s390/vfio_ccw component of the Linux kernel . When cp_init() fails and cp->initialized is not set, the standard cp_free() routine cannot be used to release all allocated memory. The existing partial fix in ccwchain_handle_ccw() only frees the currently-processed ...

CVE-2026-80539

CVE-2026-80539 affects the Linux kernel 's drm/amdgpu driver. In amdgpu_cs_pass1(), a user submission carrying multiple AMDGPU_CHUNK_ID_FENCE chunks causes amdgpu_cs_p1_user_fence() to run more than once. Because p->uf_bo is a single-slot field, each subsequent call overwrites it with a newly ...

nwn-exploit

Exploit Neverwinter Nights: Enhanced Edition Questa repository contiene una PoC per sfruttare Neverwinter Nights: Enhanced Editions. Questo articolo del blog descrive le vulnerabilità e lo sfruttamento. Versione di Windows: 10.0.19045.2965 Neverwinter Night Enhanced Editions: versione vulnerabile...

CVE-2018-17240_exploit

CVE-2018-17240exploit Exploit Bash per CVE-2018-17240 Perdita di memoria delle telecamere Netwave Esegui questo exploit su una telecamera Netwave vulnerabile per ottenere la configurazione di rete e le credenziali della telecamera. Le credenziali "Possibile Nome Utente" e "Possibile Password"...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS Lokaler Linux-Kernel-DoS basierend auf einem Speicherleck durch einen unprivilegierten Benutzer; man muss lediglich zuerst einen PRTIMERCREATERESTOREIDSON-prctl ausführen, basierend auf https://x.com/spendergrsec/status/1990887509664928062...

CVE-2025-39913

CVE-2025-39913 - Kernel Linux eBPF SOCKMAP UAF Autore: Byte Reaper La mia piattaforma:https://www.bytrep.com/ Descrizione Questa repository contiene una proof-of-concept tecnica per CVE-2025-39913, una vulnerabilità nella funzione tcpbpfsendverdict del kernel Linux. Quando bpfmsgcorkbytes non...

CVE-2025-6554

CVE-2025-6554 Reproduktion der Schwachstelle root@kitploit: for macOS: brew intsall ninja git clone https://chromium.googlesource.com/chromium/tools/depottools.git export PATH=/path/to/depottools:$PATH fetch v8 cd v8 git checkout 13.8.500258 gclient sync -D sh v8asan.sh autoninja -C out/arm64.asa...

CVE-2025-5777

CVE-2025-5777 Exploit per la Perdita di Memoria di Citrix NetScaler !WARNING Questo script è destinato esclusivamente a scopi educativi e di ricerca. Non utilizzarlo contro sistemi senza autorizzazione esplicita. L'accesso o il test non autorizzato è illegale e non etico. Leggi il DISCLAIMER...

CVE-2017-0038-EXP-C-JS

CVE-2017-0038-EXP-C-JS L'analisi dettagliata della vulnerabilità e il processo di scrittura dell'Exploit sono stati pubblicati su 安全客: http://bobao.360.cn/learning/detail/3644.html Nell'Exploit C manca una printf che stampa l'array color finale; puoi aggiungerla manualmente, oppure usare...

CVE-2022-0853

CVE-2022-0853 CVE-2022-0853 Una perdita di memoria sul lato client jboss, quando si utilizza UserTransaction ripetutamente. Ad esempio: private void testTransaction throws Exception root@kitploit: forint i=1; i 500000; i++ System.out.println"Starting process " + i; // get the UserTransaction and...

CVE-2025-54939

PoC per QUIC-LEAK CVE-2025-54939 in LSQUIC Panoramica Questo PoC evidenzia la CVE-2025-54939, una vulnerabilità di esaurimento della memoria pre-handshake Denial of Service nell'implementazione QUIC di LSQUIC. Il problema, denominato QUIC-LEAK, è stato documentato per la prima volta da Imperva:...

shodanwave

Shodanwave Shodanwave è uno strumento per esplorare e ottenere informazioni da telecamere, in particolare Netwave IP Camera. Lo strumento utilizza un motore di ricerca chiamato shodan che semplifica la ricerca di telecamere online. Cosa fa lo strumento? Guarda, una lista! Ricerca Forza bruta...