heartbleed-lab

heartbleed-lab A small, self-contained lab for CVE-2014-0160 Heartbleed — the TLS heartbeat over-read in OpenSSL 1.0.1–1.0.1f. It builds the genuinely vulnerable OpenSSL from pinned upstream source in a throwaway container, serves it, and includes a proof-of-concept client that leaks live process...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Summary A vulnerability in Apple’s image processing RawCamera.bundle affects iOS 18.6.1 and macOS. The issue occurs when DNG files contain mismatched TIFF metadata and JPEG Lossless parameters , leading to memory...

AZL-105972 CVE-2026-75819 affecting package aspell 0.60.8.1-1

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

DEBIAN-CVE-2026-75819

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

DEBIAN-CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75819

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

OPENSUSE-SU-2026:22026-1 Security update for prometheus-blackbox_exporter

This update for prometheus-blackboxexporter fixes the following issues: Changes in prometheus-blackboxexporter: - CVE-2026-84304: Fix heap memory exhaustion OOM via HTTP/2 DATA frame fragmentation in gRPC-Go by bumping it to version 1.83.1 bsc1279126 - CVE-2026-39821: Fix potential validation...

CVE-2026-75819 Out-of-bounds Read in GNU Aspell

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

CVE-2026-75819 Out-of-bounds Read in GNU Aspell

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

CVE-2026-75819

GNU Aspell contains an out-of-bounds read vulnerability in the ReadOnlyDict::load() function within readonly_ws.cpp. The root cause is the lack of bounds validation when the application uses offset fields from a binary .rws dictionary file header as byte indices into a heap buffer. An attacker co...

EUVD-2026-93365

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

kernelmode-driver

kernelmode-driver Kernel Driver for x64 Window System which allows you to read/write Virtual/Physical Memory hooking Win32k Info: I tried to keep the project as clean as possible so I adapted Microsoft Syntax for Kernel Mode functions KE Mostly used "conventional" data types like void instead of...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

http2-bomb-detector

http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...

EUVD-2026-93359

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...