CVE-2019-6207

CVE-2019-6207 يمكن استغلال هذه الثغرة في بيئة sandbox على أنظمة macOS wop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the process has...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING Ce script est destiné uniquement à des fins éducatives et de recherche. Ne l'utilisez pas contre des systèmes sans autorisation explicite. Tout accès ou test non autorisé est illégal et contraire à l'éthique. Lisez l'intégralité du...

CVE-2022-29968

CVE-2022-29968 إثبات المفهوم لـ CVE-2022-29968 ذاكرة غير مهيأة في نواة لينكس، وتحديداً نظام iouring. تم العثور على الانهيار باستخدام Syzkaller. تم تحليل الانهيار بواسطة Joseph Ravichandran و Michael Wang. تم كتابة الإكسبلويت بواسطة Joseph Ravichandran. وجدنا هذا الخطأ وأبلغناه كجزء من المشروع...

ctl_ctloutput-leak

ctlctloutput-leak Функция ctlctloutput в macOS High Sierra 10.13 игнорирует возвращаемое значение вызова sooptcopyin, что открывает окно состояния гонки для утечки неинициализированных данных кучи ядра в пользовательское пространство. ctlctloutput-leak — это proof-of-concept эксплойт, который...

Ticketbleed

Ticketbleed هذه الأداة مخصصة لاستغلال ثغرة Ticketbleed CVE-2016-9244. مكتبة Ticketbleed الموجودة داخل مجلد src هي نسخة معدّلة من مكتبة crypto/tls الخاصة بلغة Go، وقد أُجريت عليها بعض التغييرات داخل ملفات handshakeclient.go, tls.go, common.go ولكنها مطابقة تقريبًا للأصل. البناء root@kitploit: cd...

CVE-2025-5777

استغلال تسرب الذاكرة في Citrix NetScaler CVE-2025-5777 !WARNING هذا النص البرمجي مخصص للأغراض التعليمية والبحثية فقط. لا تستخدمه ضد أنظمة دون إذن صريح. الوصول غير المصرح به أو الاختبار غير قانوني وغير أخلاقي. اقرأ إخلاء المسؤولية الكامل قبل استخدام هذا النص البرمجي. نظرة عامة يوضح هذا المشروع ثغر...

CVE-2025-14847

Инструмент обнаружения уязвимости MongoDB CVE-2025-14847 Инструмент для обнаружения утечки памяти в MongoDB CVE-2025-14847 ⚠️ Важное примечание: Этот инструмент предназначен только для авторизованного тестирования безопасности и оценки уязвимостей. Несанкционированное использование может нарушать...

CVE-2024-44947

CVE-2024-44947 Descrizione : Nel kernel Linux, è stata risolta la seguente vulnerabilità: fuse: Inizializzare i contenuti delle pagine oltre EOF prima di impostare uptodate fusenotifystore, a differenza di fusedoreadpage, non abilita lo zeroing delle pagine perché può essere usato per modificare...

CVE-2026-80559

CVE-2026-80559 is a Linux kernel vulnerability in the sur40 input driver. The root cause is an incorrect registration ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue were fully initialized. If userspace opened the input device immediately, ...

CVE-2026-80543

CVE-2026-80543 affects the Linux kernel on s390 architectures, specifically the s390/zcrypt subsystem. The vulnerable functions xcrb_msg_to_type6cprb_msgx() and xcrb_msg_to_type6_ep11cprb_msgx() copy a user-space message into a kernel buffer based on its length, but subsequent processing requires...

cve-2019-6207

CVE-2019-6207 root@kitploit: $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct...

CVE-2025-5777

CVE-2025-5777 - PoC per perdita di memoria in Citrix NetScaler 📌 Descrizione Questo script sfrutta una vulnerabilità critica di divulgazione della memoria nei dispositivi Citrix NetScaler ADC/Gateway, identificata come CVE-2025-5777 soprannominata CitrixBleed 2. Innesca una perdita di memoria...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 Beschreibung Dieses Skript wurde entwickelt, um die Schwachstelle zur Offenlegung von Heap-Speicher namens CVE-2025-14847 „MongoBleed“ in MongoDB Server auszunutzen. Durch das Senden speziell präparierter zlib-komprimierter OPMSG-Pakete mit einer überhöhten Dokumentlän...

MongoDeepDive

🌊 MongoDeepDive Exploit del protocollo wire MongoDB sensibile al contesto CVE-2025-14847 Analizzatore euristico avanzato per operazioni Red Team 💀 Panoramica MongoDeepDive è uno scanner asincrono ad alte prestazioni e un analizzatore forense progettato per rilevare perdite di memoria non...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

K000163028: glibc vulnerability CVE-2025-15281

Security Advisory Description Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process. CVE-2025-15281...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...