PT-2026-84547

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2019-6207

CVE-2019-6207 이 취약점은 macOSwop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the process has entitlement for neighbor cache read. / if w-wo...

Palimpsest

CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...

cve-2021-43226PoC

CVE-2021-43226 재현 환경 운영 체제: Hyper-V의 Win10 20H2 빌드 번호 19042.508, 웹사이트 https://os.click/en 발견, Windows 이미지가 비교적 완전하고 아직 백도어를 발견하지 못했습니다. 찾은 PoC는 Visual Studio 2013으로 컴파일되었기 때문에 저도 Visual Studio 2013을 사용하여 정적으로 링크했습니다. 취약점 취약점은 clfs.sys 의 CClfsLogFcbVirtual::QueryLogFileInfo 함수에 있습니다. clfs.sys는...

CVE-2026-80656

A flaw was found in the Linux kernel's hfsplus filesystem. A local attacker could provide a specially crafted and corrupted HFS+ image. When attempting to mount this image, a malformed btree node size value could lead to the use of an uninitialized value within the kernel. This could result in a...

cve-2016-0040

cve-2016-0040 poc for cve-2016-0040 bug found and exploited by Meysam Firozi @R00tkitSmm this poc help write arbitrary data to arbitrary address in windows kernel for more info see ny blog : http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...

CVE-2026-80689

A flaw was found in the Linux kernel's mmiotrace component. When the mmiotracearray is not initialized or is disabled, invoking mmiotracerw or mmiotracemapping can lead to a NULL pointer dereference. This can cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

CVE-2026-80707

A flaw was found in the Linux kernel's J1939 CAN bus transport module. When a new session's receive buffer is allocated, it is not properly initialized, which can leave residual data from previous memory usage. A local attacker could potentially exploit this to read sensitive information from the...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 설명 이 스크립트는 MongoDB Server의 힙 메모리 노출 취약점 인 CVE-2025-14847"MongoBleed"를 악용하도록 설계되었습니다. 부풀려진 문서 길이를 가진 특수하게 조작된 zlib 압축 OPMSG 패킷을 전송함으로써, 서버가 응답에 초기화되지 않은 힙 메모리를 반환하도록 속입니다. 이를 통해 다음과 같은 민감한 정보가 유출될 수 있습니다: 스크립트는 다양한 오프셋으로 지속적으로 프로브를 전송하고 실시간으로 새롭게 관찰된 유출 문자열 을 출력합니다. 출력을...

CVE-2025-14847

MongoDB CVE-2025-14847 脆弱性検出ツール MongoDB メモリリーク脆弱性 CVE-2025-14847 検出ツール ⚠️ 重要な注意：このツールは認可されたセキュリティテストおよび脆弱性評価のみを目的としています。無断使用は法律違反となる可能性があります。 📋 目次 脆弱性の説明 機能の特徴 インストール 使用方法 テスト環境の構築 出力例 検出原理 修正の推奨事項 免責事項 🔍 脆弱性の説明 CVE-2025-14847 は、MongoDB の Zlib...

Linux Distros Unpatched Vulnerability : CVE-2026-80711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplie...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator th...

CVE-2015-8710

复现工具 感谢 Mike Dalessio、Francois Chagnon、Florian Weingarten 和 Jun Kokatsu。 参见 BZ 746048 在 Linux 上构建 root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make 在 Linux 上复现...

CVE-2024-44947

CVE-2024-44947 Descrizione : Nel kernel Linux, è stata risolta la seguente vulnerabilità: fuse: Inizializzare i contenuti delle pagine oltre EOF prima di impostare uptodate fusenotifystore, a differenza di fusedoreadpage, non abilita lo zeroing delle pagine perché può essere usato per modificare...

Linux Distros Unpatched Vulnerability : CVE-2026-42392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returne...

Chromium: CVE-2026-79221 Uninitialized resource in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78914 Uninitialized resource in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79118 Uninitialized resource in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79269 Uninitialized resource in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...