CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

CVE-2021-22205

CVE-2021-22205 نظرًا لأن GitLab لا يتحقق بشكل صحيح من ملفات الصور التي يتم تمريرها إلى محلل الملفات، فإن ذلك يؤدي إلى تنفيذ أوامر. يمكن للمهاجم إنشاء طلبات خبيثة لاستغلال هذه الثغرة لتنفيذ أوامر عشوائية على النظام المستهدف، مما يؤدي في النهاية إلى السيطرة على خادم GitLab. وبما أن معظم النصوص...

CVE-2021-22205-gitlab

تأثير الثغرة تم اكتشاف مشكلة في GitLab CE/EE تؤثر على جميع الإصدارات بدءًا من 11.9. لم يكن GitLab يتحقق بشكل صحيح من ملفات الصور التي يتم تمريرها إلى محلل ملفات، مما أدى إلى تنفيذ أوامر عن بُعد. المنتج المتأثر Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 البيئة root@kitploit: expo...

panrapidcheck

PAN Rapid Check بسيط ربما يجب عليك فعل ذلك في bash باستخدام grep مدقق ملفات دعم PANOS يستخرج بعض الأماكن للبحث عن مؤشرات الاختراق IoCs لـ CVE-2024-3400 قم بتوليد ملف الدعم من Device - Support - Generate Tech Support file يجب أن يتضمن الملف iocs.txt عناوين IP/مضيفات من المصادر المعروفة، على سبيل...

GitLab-CVE-2021-22205-

تأثير الثغرة تم اكتشاف مشكلة في GitLab CE/EE تؤثر على جميع الإصدارات بدءًا من 11.9. لم يكن GitLab يتحقق بشكل صحيح من ملفات الصور التي تم تمريرها إلى محلل ملفات، مما أدى إلى تنفيذ أوامر عن بُعد. الإصدارات المتأثرة Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 تأثير الثغرة قريباً...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2021-22205

भेद्यता प्रभाव GitLab CE/EE के सभी संस्करणों में 11.9 से शुरू होने वाली एक समस्या पाई गई है। GitLab फ़ाइल पार्सर को दी गई इमेज फ़ाइलों को सही ढंग से मान्य नहीं कर रहा था, जिसके परिणामस्वरूप रिमोट कमांड निष्पादन हुआ। भेद्यता उत्पाद Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 वाताव...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

Important: freerdp

Issue Overview: FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-2117)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2117 advisory. TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694 Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19695 C12.22...

CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104792 advisory. Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104755 advisory. Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104787 advisory. ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE starting from 11.9 does not properly validate image files that were passed to a file parser, resulting in a remote command execution vulnerability. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...