pedro ribeiro vulnerabilities and exploits

(subscribe to this query)

X.org X server 1.13.3 and previous versions, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files.

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 12.10

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde prior to 5.1.1 allows remote malicious users to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.

Horde Horde Application Framework 5.0.4 Horde Horde Application Framework 5.0.2 Horde Horde Application Framework 5.0.1 Horde Horde Application Framework 5.0.0 Horde Horde Application Framework Horde Horde Application Framework 5.0.3

1 EDB exploit

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

Gnome Gdkpixbuf 2.42.6 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 11.0

GNOME GdkPixbuf (aka GDK-PixBuf) prior to 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit...

Gnome Gdk-pixbuf Fedoraproject Fedora 35 Debian Debian Linux 11.0

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) prior to 55.1 does not properly track directionally isolated pieces of text, which allows remote malicious users to ca...

Apple Iphone Os Apple Watchos Apple Itunes Apple Mac Os X Icu-project International Components For Unicode

1 EDB exploit

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) prior to 55.1 uses an integer data type that is inconsistent with a header file, which allows remote malicious users t...

Apple Watchos Apple Mac Os X Icu-project International Components For Unicode

1 EDB exploit

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and previous versions allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.

Netgear Prosafe Network Management Software 300 1.5.0.11

2 EDB exploits1 Article

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and previous versions allow remote malicious users to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then a...

Netgear Prosafe Network Management Software 300

1 EDB exploit1 Article

This vulnerability allows network-adjacent malicious users to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens ...

Netgear R6700 Firmware 1.0.4.84 10.0.58

1 Metasploit module

This vulnerability allows network-adjacent malicious users to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ...

Netgear R6700 Firmware 1.0.4.84 10.0.58

1 Metasploit module

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook