mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

CVE-2026-120245

A flaw was found in FFmpeg. An attacker could exploit this vulnerability by tricking a user or automated system into processing a specially crafted Sun Raster image file. Because the decoder fails to properly initialize memory buffers when handling truncated image data, uninitialized system memor...

CVE-2026-120246 FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder

FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled newpalette entries in cdxldecodeham8 or...

CVE-2026-120246

FFmpeg versions 4.4 through 9.0.2 are vulnerable to a use of uninitialized variable in the CDXL decoder . Specifically, the functions cdxl_decode_ham8() and cdxl_decode_ham6() may select unfilled new_palette entries when processing a crafted type-0 CDXL file. This flaw allows an attacker to leak ...

CVE-2026-120244

FFmpeg versions 2.1 through 9.0.2 are vulnerable to a use of uninitialized resource vulnerability (CWE-908) within the PCX decoder . An attacker can craft a malicious PCX image with truncated RLE scanlines , which causes the pcx_decode_frame() function to copy uninitialized av_malloc() buffer con...

CVE-2026-120245

FFmpeg versions 0.10 through 9.0.2 are vulnerable to a use of uninitialized resource vulnerability in the sunrast_decode_frame() function. When decoding truncated 1-bit and 4-bit paletted Sun Raster images, the software fails to clear a temporary bitmap. This allows an attacker to craft a malicio...

CVE-2026-120244 FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcxdecodeframe to copy uninitialized avmalloc buffer...

CVE-2026-120245 FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrastdecodeframe that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

CVE-2020-1206-POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...

MongoDeepDive

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations 💀 Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...

Ticketbleed

Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD cd Ticketbleed mv...

CVE-2025-14847

MongoDB CVE-2025-14847 Vulnerability Detection Tool MongoDB Memory Leak Vulnerability CVE-2025-14847 Detection Tool ⚠️ Important: This tool is for authorized security testing and vulnerability assessment only. Unauthorized use may violate the law. 📋 Table of Contents Vulnerability Description...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

CVE-2024-44947

CVE-2024-44947 Description : In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial page contents. So...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak PoC 📌 Description This script exploits a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway appliances, identified as CVE-2025-5777 dubbed CitrixBleed 2. It triggers a memory leak through the /p/u/doAuthentication.do endpoint,...

cve-2019-6207

CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

CVE-2019-6207

CVE-2019-6207 this vulneriliabity can be trigger in sandbox at macOSwop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the process has...