194 matches found
cve-2023-33476
CVE-2023-33476 ReadyMedia MiniDLNA 버전 1.1.15부터 1.3.2까지는 버퍼 오버플로우에 취약합니다. 이 취약점은 청크 전송 인코딩을 사용하는 HTTP 요청을 처리할 때 잘못된 검증 로직으로 인해 발생합니다. 이로 인해 이후 코드에서 할당된 버퍼 길이를 초과하는 공격자 제어 청크 값을 사용하게 되어 범위를 벗어난 읽기/쓰기가 발생합니다. 원인 분석 익스플로잇 세부 정보 NIST CVE 항목 익스플로잇 x86-64 대상용 tcache poisoning + GOT overwrite 익스플로잇을 통한 R...
exploit-CVE-2020-28926
exploit-CVE-2020-28926 참고 https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ 빌드 minidlna-1.2.1 소스가 포함된 폴더를 복사하고 buildandrun.sh를 실행하세요...
CVE-2024-51442
설명 CVE-2024-51442는 minidlna/Readyshare 버전 %d; need to recreate...\n", ret, DBVERSION; sqlite3closedb; snprintfcmd, sizeofcmd, "rm -rf %s/files.db %s/artcache", dbpath, dbpath; if systemcmd != 0 DPRINTFEFATAL, LGENERAL, "Failed to clean old file cache! Exiting...\n"; 그리고 -R이 선택적 명령줄 매개변수로 전달될 때...
[SECURITY] Fedora 45 Update: minidlna-1.3.3-18.fc45
MiniDLNA aka ReadyDLNA is server software with the aim of being fully compliant with DLNA/UPnP-AV clients. The minidlna daemon serves media files music, pictures, and video to clients on your local network. Example clients include applications such as Totem and XBMC, and devices such as portable...
MINI-C3WC-4CGP-CF5P
Bulletin has no description...
CVE-2026-11448
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11448
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
EUVD-2026-34979
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11448
CVE-2026-11448 affects GL.iNet GL-MT3000 up to version 4.4.5. The vulnerability resides in the Minidlna Service, where the /rpc realpath function can be manipulated via the kube.set argument to cause a remote command injection. The issue can be triggered over the network without user interaction,...
CVE-2026-11448 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11448
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11448 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
PT-2026-47169
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11448: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
GL.iNet GL-MT3000 命令注入漏洞
GL.iNet GL-MT3000 is a portable travel router from the company GL.iNet, which supports Wi-Fi 6 and VPN functions. Versions of GL.iNet GL-MT3000 with a version number of 4.4.5 or earlier have a command injection vulnerability. This vulnerability stems from incorrect operations with the parameter...
Fedora: Security Advisory (FEDORA-2025-7dbb8de594)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2013-2684
Malware in sbrugna...
EUVD-2013-2677
Malware in sbrugna...