sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Crash in hfs_load_extended_attrs

Detailed Report: https://oss-fuzz.com/testcase?key=5807962357825536 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55feffeb0781 Crash State: hfsloadextendedattrs...

CVE-2026-40024 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40024 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40025 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2

CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2. A patched version of the package is available...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_proc_attrseq

Detailed Report: https://oss-fuzz.com/testcase?key=5542460911845376 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: flsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d1329be1481 Crash State: ntfsprocattrseq...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Detailed Report: https://oss-fuzz.com/testcase?key=5643957028847616 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x798d63ae0c80 Crash State: ntfsmakedatar...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Crash in hfs_load_extended_attrs

Detailed Report: https://oss-fuzz.com/testcase?key=5442328178524160 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x555f8ef2f4d3 Crash State: hfsloadextendedattrs...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in tsk_UTF16toUTF8

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4716961889320960 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: flsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

sleuthkit:fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4845446867779584 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: flsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

EUVD-2022-48503

Malicious code in bioql PyPI...

OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.

...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5381794296037376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

CVE-2022-45639 affecting package sleuthkit 4.9.0-4

CVE-2022-45639 affecting package sleuthkit 4.9.0-4. This CVE either no longer is or was never applicable...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_load_extended_attrs

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072584086978560 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

sleuthkit:sleuthkit_fls_fat_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5145450555965440 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsfatfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

sleuthkit:sleuthkit_mmls_gpt_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5175868480618496 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitmmlsgptfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Memcpy-param-overlap in tsk_fs_load_file_action

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6541397457960960 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Memcpy-param-overlap Crash...

sleuthkit 4.11.1 - Command Injection Exploit

Exploit Title: sleuthkit 4.11.1 - Command Injection CVE-2022-45639 Vendor Homepage: https://github.com/sleuthkit Vulnerability Type: Command injection Attack Type: Local Version: 4.11.1 Exploit Author: Dino Barlattani, Giuseppe Granato Link poc: https://www.binaryworld.it/guidepoc.aspCVE-2022-456...