UBUNTU-CVE-2026-27145

x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

Linux Distros Unpatched Vulnerability : CVE-2022-27145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box. CVE-2022-27145 Note that...

CVE-2025-27145

copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.16.15. The vulnerability is considered low-risk. By handing someone a maliciously-named file, and then tricking them into dragging the file into copyparty's Web-UI, an attacker could execu...

CVE-2025-27145 copyparty renders unsanitized filenames as HTML when user uploads empty files

copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.16.15. The vulnerability is considered low-risk. By handing someone a maliciously-named file, and then tricking them into dragging the file into copyparty's Web-UI, an attacker could execu...

CVE-2025-27145 copyparty renders unsanitized filenames as HTML when user uploads empty files

copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.16.15. The vulnerability is considered low-risk. By handing someone a maliciously-named file, and then tricking them into dragging the file into copyparty's Web-UI, an attacker could execu...

CVE-2025-27145

The CVE-2025-27145 entry relates to copyparty, a portable file server, with a DOM-based XSS vulnerability in versions prior to 1.16.15. The issue is triggered during drag-and-drop of a maliciously named, empty file into the Web-UI, causing arbitrary JavaScript execution with the user’s privileges...

CVE-2025-27145

creationtimestamp| type| source ---|---|--- 2025-02-25 01:31:40+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-m2jw-cj8v-937r 2025-02-25 04:49:57+00:00| seen| https://t.me/cvedetector/18848...

CVE-2024-27145 Multiple Post-authenticated Remote Code Execution

The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute...

CVE-2022-27145

creationtimestamp| type| source ---|---|--- 2022-04-08 20:16:27+00:00| seen| https://t.me/cibsecurity/40398...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27145

GPAC mp4box (GPAC) vulnerability CVE-2022-27145: a stack overflow in gf_isom_get_sample_for_movie_time affects mp4box 1.1.0-DEV-rev1727-g8be34973d-master. Debian security advisory DSA-5411-1 fixes this in gpac via updated packages (e.g., 1.0.1+dfsg1-4+deb11u2); Gentoo GLSA also references an upgr...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2021-27145

CVE-2021-27145 affects FiberHome HG6245D devices via RP2613. The web daemon contains hardcoded admin/lnadmin credentials, enabling potential unauthorized access. In the provided records, the affected device is a FiberHome HG6245D FTTH ONT router; root cause is hardcoded credentials in the web int...