CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 描述 此脚本旨在利用 MongoDB 服务器中被称为 CVE-2025-14847 （"MongoBleed"）的 堆内存泄露漏洞 。通过发送特制的经 zlib 压缩的 OPMSG 数据包，并带有膨胀的文档长度，该脚本欺骗服务器在其响应中返回未初始化的堆内存。这可能会泄露敏感信息，例如： 脚本持续发送带有不同偏移量的探测，并实时打印 新观察到的泄露字符串 。它抑制重复项以保持输出清晰可读。 致谢 Joe Desimone 的原始 PoC 对定义的偏移范围执行单次遍历 ，收集所有唯一片段，保存到文件，并可选择在最后高亮有趣的模式。...

MongoDeepDive

🌊 MongoDeepDive 上下文感知的 MongoDB 网络协议利用工具 CVE-2025-14847 面向红队的高级启发式分析器 💀 概述 MongoDeepDive 是一款高性能异步漏洞扫描器和取证分析器，旨在检测受 CVE-2025-14847 影响的 MongoDB 服务器中的 未初始化内存泄漏 。 与仅检查响应大小的标准 PoC 脚本不同，MongoDeepDive 采用 香农熵 分析和启发式过滤，以区分空内存填充（垃圾）和高价值机密（如私钥、AWS 令牌、密码）。 本工具专为 安全架构师 和 红队成员 设计，他们需要可操作的情报，而不仅仅是噪声。 📺 演示输出...

CVE-2026-72447 sctp: hold socket lock when dumping endpoints in sctp_diag

In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...

CVE-2026-72447: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...

CVE-2026-64551: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...

CVE-2026-36611

Mercusys AC12G EU V1 with firmware AC12GEUV1200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers...

CVE-2026-34459

Sandboxie-Plus (Windows) vulnerability in SbieSvc GetRawInputDeviceInfoSlave (v1.17.2 and earlier) allows sandbox escape via two chained flaws: (1) when cbSize=0, up to 32KB of uninitialized kernel/user stack memory is returned, leaking addresses/stack cookies and bypassing ASLR and /GS; (2) an a...

JLSEC-2026-277 Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can...

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

SUSE CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

CVE-2017-18675

An issue was discovered on Samsung mobile devices with M6.0 and N7.x Exynos7420 or Exynox8890 chipsets software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 April 2017...

EUVD-2024-50581

Malicious code in bioql PyPI...

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: CVE-2025-7345: Uninitialized memory could lead to leak arbitrary memory contents bsc1246114. CVE-2025-6199: Heap buffer overflow within the gdkpixbufjpegimageloadincrement function bsc1245227. Patch Instructions: To install this SUSE update u...

SUSE-SU-2025:02954-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: - CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory contents leak bsc1245227 - CVE-2025-7345: Fixed heap buffer overflow within the gdkpixbufjpegimageloadincrement function bsc1246114...

Linux Distros Unpatched Vulnerability : CVE-2024-26697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix data corruption in dsync block recovery for small block sizes The helper function nilfsrecoverycopyblock of nilfsrecoverydsyncblocks, which recovers...

FreeBSD-SA-25:04.ktrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:04.ktrace Security Advisory The FreeBSD Project Topic: Uninitialized kernel memory disclosure via ktrace2 Category: core Module: ktrace Announced: 2025-01-29...

CVE-2024-53869: Incomplete Cleanup

NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A successful exploit of this vulnerability might lead to information disclosure...

CLSA-2025-1737569495 Fix CVE(s): CVE-2024-12085

SECURITY UPDATE: possible information leak via checksum comparison - debian/patches/CVE-2024-12085.patch: fix issue with checksum length manipulation leading to uninitialized memory leak - CVE-2024-12085...

CVE-2024-12085 Rsync: info leak via uninitialized stack contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

CVE-2024-12085

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...