What happened
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
Affected versions
OpenSSL: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 32764OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)Fitzl Csaba2014-04-09VerifiedExploit-DB 32791OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)prdelka2014-04-10VerifiedExploit-DB 32998OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)Ayman Sagy2014-04-24VerifiedExploit-DB 32745OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory DisclosureJared Stafford2014-04-08VerifiedPoC-in-GitHub · FiloSottile/HeartbleedA checker (site and tool) for CVE-2014-0160★ 2379FiloSottile2014-04-07CandidatePoC-in-GitHub · titanous/heartbleederOpenSSL CVE-2014-0160 Heartbleed vulnerability test★ 452titanous2014-04-08CandidatePoC-in-GitHub · DominikTo/bleedbleed is a tool to test servers for the 'Heartbleed' vulnerability (CVE-2014-0160).★ 7DominikTo2014-04-08CandidatePoC-in-GitHub · cyphar/heartthreaderMass, multithreaded testing for servers against Heartbleed (CVE-2014-0160).★ 2cyphar2014-04-08CandidatePoC-in-GitHub · jdauphant/patch-openssl-CVE-2014-0160Patch openssl #heartbleed with ansible★ 19jdauphant2014-04-08CandidatePoC-in-GitHub · musalbas/heartbleed-masstestMulti-threaded tool for scanning many hosts for CVE-2014-0160.★ 572musalbas2014-04-08CandidatePoC-in-GitHub · obayesshelton/CVE-2014-0160-Scanner★ 0obayesshelton2014-04-08CandidatePoC-in-GitHub · Lekensteyn/pacemakerHeartbleed (CVE-2014-0160) client exploit★ 331Lekensteyn2014-04-08CandidatePoC-in-GitHub · isgroup/openmagicOpenSSL TLS heartbeat read overrun (CVE-2014-0160)★ 40isgroup2014-04-08CandidatePoC-in-GitHub · takeshixx/ssl-heartbleed.nseNmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160★ 0takeshixx2014-04-08CandidatePoC-in-GitHub · roganartu/heartbleedchecker-chromeChrome extension that automatically checks visited sites for vulnerability to OpenSSL CVE-2014-0160★ 0roganartu2014-04-09CandidatePoC-in-GitHub · zouguangxian/heartbleedChecks for vulnerabilities: CVE-2014-0160★ 2zouguangxian2014-04-09CandidatePoC-in-GitHub · sensepost/heartbleed-pocTest for SSL heartbeat vulnerability (CVE-2014-0160)★ 171sensepost2014-04-09CandidatePoC-in-GitHub · proactiveRISK/heartbleed-extentionA firefox extension and checker for CVE-2014-0160★ 1proactiveRISK2014-04-09CandidatePoC-in-GitHub · amerine/coronaryTest CIDR blocks for CVE-2014-0160/Heartbleed★ 2amerine2014-04-10CandidatePoC-in-GitHub · 0x90/CVE-2014-0160Heartbleed variants★ 80x902014-04-10CandidatePoC-in-GitHub · waqasjamal-zz/HeartBleed-Vulnerability-CheckerThis repo contains a script to automatically test sites for vulnerability to the Heartbleed Bug (CVE-2014-0160) based on the input file for the urls.★ 2waqasjamal-zz2014-04-10CandidatePoC-in-GitHub · siddolo/knockbleedCVE-2014-0160 mass test against subdomains★ 0siddolo2014-04-10CandidatePoC-in-GitHub · sammyfung/openssl-heartbleed-fixOpenSSL Heartbleed (CVE-2014-0160) Fix script★ 1sammyfung2014-04-10CandidatePoC-in-GitHub · a0726h77/heartbleed-testCVE-2014-0160 scanner★ 0a0726h772014-04-11CandidatePoC-in-GitHub · pblittle/aws-sutureOpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner.★ 2pblittle2014-04-11CandidatePoC-in-GitHub · hreese/heartbleed-dtlsPOC for CVE-2014-0160 (Heartbleed) for DTLS★ 5hreese2014-04-12CandidatePoC-in-GitHub · 0xinf0/bleeding_onionsScript to find Exit and Guard nodes in the Tor Network, that are still suffering from CVE-2014-0160★ 60xinf02014-04-12CandidatePoC-in-GitHub · idkqh7/heatbleedingTest script for test 1Password database for SSL Hea(r)t Bleeding (CVE-2014-0160)★ 0idkqh72014-04-13CandidatePoC-in-GitHub · GeeksXtreme/ssl-heartbleed.nseNmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160.★ 0GeeksXtreme2014-04-13CandidatePoC-in-GitHub · xlucas/heartbleedA research tool designed to check for OpenSSL CVE-2014-0160 vulnerability★ 1xlucas2014-04-13CandidatePoC-in-GitHub · einaros/heartbleed-toolsOpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.★ 98einaros2014-04-15CandidatePoC-in-GitHub · mozilla-services/HeartbleedA checker (site and tool) for CVE-2014-0160★ 3mozilla-services2014-04-15CandidatePoC-in-GitHub · yryz/heartbleed.jsopenssl Heartbleed bug(CVE-2014-0160) check for Node.js★ 4yryz2014-04-19CandidatePoC-in-GitHub · DisK0nn3cT/MaltegoHeartbleedMaltego transform to detect the OpenSSL Heartbleed vulnerability (CVE-2014-0160)★ 18DisK0nn3cT2014-05-01CandidatePoC-in-GitHub · OffensivePython/HeartLeakCVE-2014-0160 (Heartbeat Buffer over-read bug)★ 15OffensivePython2014-05-03CandidatePoC-in-GitHub · vortextube/ssl_scannerHeartbleed (CVE-2014-0160) SSLv3 Scanner★ 1vortextube2014-10-12CandidatePoC-in-GitHub · mpgn/heartbleed-PoC:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:★ 85mpgn2015-03-08CandidatePoC-in-GitHub · iSCInc/heartbleedA checker (site and tool) for CVE-2014-0160. Software from @FiloSottile for iSC Inc..★ 0iSCInc2015-05-08CandidatePoC-in-GitHub · marstornado/cve-2014-0160-Yunfeng-Jiang★ 0marstornado2015-06-09CandidatePoC-in-GitHub · hmlio/vaas-cve-2014-0160Vulnerability as a service: showcasing CVS-2014-0160, a.k.a. Heartbleed★ 15hmlio2015-07-12CandidatePoC-in-GitHub · hybridus/heartbleedscannerNetwork Scanner for OpenSSL Memory Leak (CVE-2014-0160)★ 11hybridus2015-09-24CandidatePoC-in-GitHub · froyo75/Heartbleed_Dockerfile_with_NginxDockerfile for testing CVE-2014-0160 Heartbleed exploitation.★ 0froyo752015-10-23CandidatePoC-in-GitHub · Xyl2k/CVE-2014-0160-Chrome-PluginHeartbleed★ 1Xyl2k2016-02-16CandidatePoC-in-GitHub · caiqiqi/OpenSSL-HeartBleed-CVE-2014-0160-PoC来自：https://www.freebuf.com/articles/web/31700.html★ 0caiqiqi2018-11-08CandidatePoC-in-GitHub · Saymeis/HeartBleedCVE-2014-0160★ 1Saymeis2018-12-10CandidatePoC-in-GitHub · cved-sources/cve-2014-0160cve-2014-0160★ 0cved-sources2019-01-06CandidatePoC-in-GitHub · cheese-hub/heartbleedDemonstration of the Heartbleed Bug CVE-2014-0160★ 2cheese-hub2019-02-27CandidatePoC-in-GitHub · artofscripting-zz/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS★ 0artofscripting-zz2019-04-02CandidatePoC-in-GitHub · tomdevman/heartbleed-bugExample and demo setup for Heartbleed vulnerability (CVE-2014-0160). This should be used for testing purposes only!💔★ 0tomdevman2019-04-03CandidatePoC-in-GitHub · ThanHuuTuan/HeartexploitAquí está mi nuevo y primer exploit web, este exploit ataca a la vulnerabilidad de HeartBleed (CVE-2014-0160) espero que os guste.★ 0ThanHuuTuan2019-08-05CandidatePoC-in-GitHub · rouze-d/heartbleedSimple OpenSSL TLS Heartbeat (CVE-2014-0160) Scanner and Exploit (Multiple SSL/TLS versions)★ 0rouze-d2020-07-04CandidatePoC-in-GitHub · WildfootW/CVE-2014-0160_OpenSSL_1.0.1f_Heartbleed★ 0WildfootW2020-12-09CandidatePoC-in-GitHub · GuillermoEscobero/heartbleedCVE-2014-0160 OpenSSL Heartbleed Proof of Concept★ 2GuillermoEscobero2020-12-13CandidatePoC-in-GitHub · anthophilee/A2SV--SSL-VUL-ScanA2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installation : $ apt update && apt upgrade $ apt install git $ apt install python2 $ apt install python $ git clone https://github.com/hahwul/ a2sv $ cd a2sv $ chmod +x * $ pip2 install -r requirements.txt usage : $ python2 a2sv.py -h It shows all commands how we can use this tool $ python a2sv.py -t 127.0.0.1 127.0.0.1 = target means here own device★ 5anthophilee2021-01-01CandidatePoC-in-GitHub · ingochris/heartpatch.usOpenSSL Heartbleed Bug CVE-2014-0160 Toolkit. Built with ❤ by Christopher Ngo.★ 3ingochris2021-02-14CandidatePoC-in-GitHub · belmind/heartbleedA collection of scripts and instructions to test CVE-2014-0160 (heartbleed). ❤️ 🩸★ 1belmind2021-03-30CandidatePoC-in-GitHub · pierceoneill/bleeding-heartThe Heartbleed bug `CVE-2014-0160` is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private keys, TLS session keys, usernames, passwords, credit cards, etc. The vulnerability is in the implementation of the Heartbeat protocol, which is used by SSL/TLS to keep the connection alive.★ 0pierceoneill2021-08-15CandidatePoC-in-GitHub · h3x0v3rl0rd/CVE-2014-0160_Heartbleed★ 0h3x0v3rl0rd2022-04-24CandidatePoC-in-GitHub · GardeniaWhite/fuzzingfuzzing with libFuzzer，inlude openssl heartbleed (CVE-2014-0160)★ 2GardeniaWhite2022-05-07CandidatePoC-in-GitHub · undacmic/heartbleed-proof-of-conceptProof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:★ 5undacmic2023-01-05CandidatePoC-in-GitHub · cbk914/heartbleed-checkerCheck for CVE-2014-0160★ 0cbk9142023-04-25CandidatePoC-in-GitHub · MrE-Fog/CVE-2014-0160-Chrome-Plugin★ 0MrE-Fog2023-04-30CandidatePoC-in-GitHub · timsonner/cve-2014-0160-heartbleed★ 0timsonner2023-07-31CandidatePoC-in-GitHub · yashfren/CVE-2014-0160-HeartBleed★ 0yashfren2024-09-20CandidatePoC-in-GitHub · Shayhha/HeartbleedAttackThis is the Heratbleed bug (CVE-2014-0160) documentation I did for Advenced Cyber Attacks course.★ 0Shayhha2025-04-12CandidatePoC-in-GitHub · ArtemCyberLab/Project-Field-Analysis-and-Memory-Leak-DemonstrationThe objective of this project was to assess a remote host for the Heartbleed vulnerability (CVE-2014-0160), verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol.★ 0ArtemCyberLab2025-06-27CandidatePoC-in-GitHub · indrajeetmp11/Heartbleed-PoC-Exploit-ScriptThis Python PoC script detects the Heartbleed vulnerability (CVE-2014-0160) by performing a TLS handshake with heartbeat extension and sending a crafted heartbeat request. It parses responses to identify leaked memory, helping assess server susceptibility to this critical OpenSSL flaw.★ 2indrajeetmp112025-11-17CandidatePoC-in-GitHub · SimoesCTT/CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160Heartbleed (CVE-2014-0160) was devastating because it leaked adjacent memory. CTT-Heartbleed goes further—it uses 33-layer temporal resonance to map, reconstruct, and extract specific memory regions across time, not just adjacent buffers.★ 0SimoesCTT2026-01-28CandidatePoC-in-GitHub · 22imer/CVE-2014-0160★ 022imer2026-01-28CandidatePoC-in-GitHub · 0xBlackash/CVE-2014-0160CVE-2014-0160★ 00xBlackash2026-03-01CandidatePoC-in-GitHub · Ryo-Soikutsu/HeartbleedDemonstration of the Heartbleed CVE (CVE-2014-0160), including lab setup instructions and source code to build your own Heartbleed lab for educational purposes★ 0Ryo-Soikutsu2026-03-22CandidatePoC-in-GitHub · victoriacfigueiredo/heartbleed-labEducational laboratory for studying CVE-2014-0160 (Heartbleed) and framing inconsistencies in TLS heartbeat handling.★ 0victoriacfigueiredo2026-05-25CandidatePoC-in-GitHub · tungduongNT/CVE-2014-0160.★ 0tungduongNT2026-07-17CandidatePoC-in-GitHub · IhsSpotlight/HeartBleed-CVE-2014-0160--SCRIPTS-python3★ 0IhsSpotlight2026-08-18CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.