Linux Distros Unpatched Vulnerability : CVE-2026-111143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed...

UBUNTU-CVE-2026-111143

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer...

CVE-2026-111143

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer...

DEBIAN-CVE-2026-111143

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer...

PT-2026-115149

Name of the Vulnerable Software and Affected Versions Ansilove libansilove versions prior to 1.4.3 Description An out-of-bounds read occurs in the ansilove xbin function within src/loaders/xbin.c due to missing bounds checks for compressed run-length records. An attacker can provide a specially...

PT-2026-115150

Name of the Vulnerable Software and Affected Versions libansilove versions 1.3.0 through 1.4.2 Description A NULL pointer dereference occurs in the ansilove xbin function when processing a specially crafted XBIN file. An attacker can trigger this by setting the 512-character flag while omitting t...

CVE-2026-111143: Out-of-bounds Read

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer...

EUVD-2006-0701

Malware in sbrugna...

PT-2018-14938

Name of the Vulnerable Software and Affected Versions libansilove version 1.0.0 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted file. This is due to a problem in the ansilove ansi function in the...

Directory traversal

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

CVE-2006-0694

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

CVE-2006-0695

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

Code injection

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

CVE-2006-0695

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

CVE-2006-0694

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

CVE-2006-0695

CVE-2006-0695 affects Ansilove prior to 1.03. The issue arises because uploaded file extensions are not filtered, enabling remote attackers to execute arbitrary code by uploading files with dangerous extensions and then accessing them directly in the upload directory. The provided documents do no...

CVE-2006-0694

CVE-2006-0694 affects Ansilove (loaders: load_*.php) before version 1.03. The vulnerability allows remote attackers to read arbitrary files via unspecified vectors involving “converting files accessible by the webserver.” Impact is limited to partial confidentiality. The available documents do no...

CVE-2006-0695: Undefined Security Weakness

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

CVE-2006-0694: Undefined Security Weakness

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

[SA18810] Ansilove File Disclosure and File Upload Vulnerabilities

TITLE: Ansilove File Disclosure and File Upload Vulnerabilities SECUNIA ADVISORY ID: SA18810 VERIFY ADVISORY: http://secunia.com/advisories/18810/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, System access WHERE: From remote SOFTWARE:...