Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo This code functionally approximates the Citrix Bleed vulnerability CVE-2023-4699 of the improper handling of the return value of snprintf in C...

netscaler-saml-memory-disclosure-security-assessment

CVE-2026-8451 - Citrix NetScaler SAML メモリオーバーリード CitrixBleed コンサルタント形式のサイバーセキュリティレポート NetScaler SAML のメモリ情報漏えいリスクに関するプロフェッショナルな脆弱性評価レポートです。技術的影響、是正措置、緩和戦略を含みます。 📍 レポート概要...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 sobrelectura de memoria en Citrix Netscaler ¡Herramienta de generación de artefactos de detección de sobrelectura de Citrix Netscaler! Detección en acción Este generador de artefactos de detección aceptará un dispositivo Netscaler objetivo e intentará filtrar memoria mediante...

overread

overread CVE-2023-4966 Citrix Bleed オーバーリードバグをシミュレートします これは、ハーバード大学のCS50 Cybersecurity 2023のための最終プロジェクトです。これはバグについてです。小さなバグが、巨大で継続的な影響を及ぼしています。このプレゼンテーションでは、ある開発者の小さなミスから得られた「出血する洞察」を共有します。そのミスは、何百万人もの人々にとって大きな問題を引き起こし続けています。 動画 Citrix Bleed 動画（YouTube） 2023年12月4日録画 メモ このC言語のデモプログラムは、snfprintf...

Astra Linux – Vulnerability in Raptor2

In the Raptor RDF Syntax Library version 2.0.16, there was a heap-based buffer overflow issue during the parsing of triples using the nquads parser in the raptorntriplesparseterminternal function...

Astra Linux – Vulnerability in glibc

The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. When using the Redis Lua Debugger, users can send malformed requests, causing the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or...

Astra Linux – Vulnerability in binutils

There is a heap-based buffer overflow issue in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. A crafted input can cause segmentation faults, leading to denial-of-service attacks, as demonstrated by c++filt...

Astra Linux – Vulnerability in Nasm

In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs due to a malicious .asm file during the call to settextfree from expandonesmacro in asm/preproc.c...

Astra Linux – Vulnerability in libsoup2.4

A flaw was discovered in libsoup. A vulnerability in the sniffunknown function may lead to a situation where heap buffers are overread...

Astra Linux – Vulnerability in libonig

A issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in the file gb18030.c, a UChar pointer was dereferenced without checking whether it pointed to the end of the matched string. This resulted in a buffer overflow...

Astra Linux – Vulnerability in libxmltok

In libexpat before version 2.2.8, crafted XML inputs could trick the parser into switching from DTD parsing to document parsing too early. A consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber would then lead to a heap-based buffer overflow...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Citrix NetScaler メモリ開示 CVSS 9.3 — Critical — 実環境での活発な悪用 CitrixBleed 2 は、Citrix NetScaler ADC および NetScaler Gateway におけるメモリ開示の脆弱性です。認証エンドポイントでの入力検証の不備により、メモリの境界外読み取り CWE-125 が発生し、認証されていない攻撃者がセッション Cookie、暗号鍵素材、その他の秘密情報を含む機密メモリ内容を漏えいさせることが可能になります。 概要 項目| 値 ---|--- CVE|...

CVE-2026-80985 net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry

In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys read the part of a v2 message that does not fit into the 44-byte union smcllcmsg, and both bound themselves by the si...

MGASA-2026-0391 Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 : openssl (RHSA-2026:66524)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66524 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

cve-images

cve-images — 故意设计有漏洞的实验镜像 一个用于在隔离实验室中进行安全研究的故意设计有漏洞 的Docker镜像集合。最初是nginx CVE复现，现已扩展为更广泛的故意设计有漏洞的镜像集（例如DVWA）。 ⚠️ 安全性 这些镜像是 故意 存在漏洞的。其中一个nginx CVE（CVE-2026-42945）正在被野外利用。仅在隔离/本地网络上运行。切勿部署到公共主机，也切勿将它们当作生产镜像发布。每个镜像都带有 lab.vulnerable=true 标签及相应的说明。 nginx CVE 镜像 所有镜像均构建于一个共享基础镜像之上，该镜像从源代码编译 nginx 1.30.0...