Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo Este código aproxima funcionalmente la vulnerabilidad Citrix Bleed CVE-2023-4699 del manejo inadecuado del valor de retorno de snprintf en C...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 sobrelectura de memoria en Citrix Netscaler ¡Herramienta de generación de artefactos de detección de sobrelectura de Citrix Netscaler! Detección en acción Este generador de artefactos de detección aceptará un dispositivo Netscaler objetivo e intentará filtrar memoria mediante...

netscaler-saml-memory-disclosure-security-assessment

CVE-2026-8451 - Sobrellectura de Memoria SAML en Citrix NetScaler CitrixBleed Informe de Ciberseguridad en Estilo Consultor Informe profesional de evaluación de vulnerabilidades sobre el riesgo de divulgación de memoria SAML en NetScaler, que incluye impacto técnico, remediación y estrategia de...

overread

overread Simula el bug de sobrelectura CVE-2023-4966 Citrix Bleed Este es mi proyecto final para Harvard CS50 Cybersecurity 2023. Trata sobre un bug. Un bug pequeño, con consecuencias enormes y continuas. En esta presentación compartiré las "revelaciones sangrantes" de un diminuto error de un...

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Divulgación de memoria de Citrix NetScaler CVSS 9.3 — Crítico — Explotación activa en la naturaleza CitrixBleed 2 es una vulnerabilidad de divulgación de memoria en Citrix NetScaler ADC y NetScaler Gateway. Una validación de entrada insuficiente en el endpoint de...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4433-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4433-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

cve-images

cve-images — imágenes de laboratorio intencionalmente vulnerables Una colección de imágenes Docker deliberadamente vulnerables para el estudio de seguridad en un laboratorio aislado. Comenzó como reproducciones de CVE de nginx y está creciendo hasta convertirse en un conjunto más amplio de imágen...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ ADVERTENCIA Esta herramienta es solo para fines educativos y de pruebas autorizadas. No utilizar en sistemas sin permiso explícito del propietario. 📋 Descripción Herramienta de detección para CVE-2026-3055 que identifica...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ ADVERTENCIA Esta herramienta es solo para fines educativos y de prueba autorizada. No utilizar en sistemas sin permiso explícito. 📋 Descripción Exploit para CVE-2026-3055 - vulnerabilidad de lectura fuera de límites memory overread en...

CVE-2026-3055

CVE-2026-3055 - Vulnerabilidad de Seguridad Severidad: N/A CVSS: N/A Impacto: N/A Publicado: 2026-03-23 Legal Solo para pruebas de seguridad autorizadas. Causa raíz versión corta Validación de entrada insuficiente en NetScaler ADC y NetScaler Gateway cuando se configura como SAML IDP, lo que...

CVE-2024-5535

CVE-2024-5535 PoC - Sobrellectura de búfer en NPN de OpenSSL Nota: No descubrimos esto, solo hicimos un PoC basado en la publicación. https://nvd.nist.gov/vuln/detail/cve-2024-5535...

BIT-PHP-MIN-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-PHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-LIBPHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

Rocky Linux 10.1 [CIQ] Security Update: libblkid / libblkid-debuginfo / libblkid-devel / libfdisk / etc (crlsa-2026_1696)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261696 advisory. util-linux: util-linux: Heap buffer overread in setpwnam when processing 256-byte usernames CVE-2025-14104 Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.2:CLSA-2026:1777569045)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777569045 advisory. - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_9122)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249122 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3261)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243261 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...