311 matches found
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...
uro
uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...
gf
gf grep のラッパーで、よく使うパターンを入力しなくて済むようにするツールです。 何？ なぜ？ 私は grep を よく 使います。コードベースを監査するとき、meg の出力を見るとき、あるいは一般的に大量のデータを扱うときなどです。次のようなかなり複雑なパターンをよく使うことになります： ▶ grep -HnrE '$POST|GET|COOKIE|REQUEST|SERVER|FILES|php://input|stdin'...
PT-2026-97025
Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...
PT-2026-95216
Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read can be triggered remotely in the RTP Depacketizer component. The issue exists within the gf rtp parse ttxt function located in the src/ietf/rtp depacketizer.c file, where manipulation of...
EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2026-3448)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...
PT-2026-93927
Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...
PT-2026-92348
Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...
PT-2026-91877
A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf mo get od id of the file compositor/media object.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and...
PT-2026-91889
A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf node get name and id of the file scenegraph/base scenegraph.c. The manipulation results in use after free. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to...
PT-2026-91891
A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf node list insert child of the file scenegraph/base scenegraph.c of the component Node Insertion. Such manipulation leads to memory corruption. The attack can be launched remotely. The exploit is publicl...
PT-2026-91890
A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf node activate ex of the file scenegraph/base scenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly...
PT-2026-92290
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write exists in the gf ta test set config function within the gf ta test.c file due to improper input validation. This flaw allows for local...
PT-2026-92298
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the gf base update finger base function within gf base.c allows for an out-of-bounds write. This issue can be exploited to achieve loca...
PT-2026-92323
In gf algo get cached dump data of gf algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-91878
A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf url concatenate ex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capabl...
PT-2026-90944
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. T...
PT-2026-89145
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf route media complete object. Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab...
EUVD-2026-75169
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gfroutemediacompleteobject. Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab...
The vulnerability of the gf_filter_pid_inst_swap_delete_task() function in the filter_core/filter_pid.c file of the MP4Box package of the GPAC multimedia platform allows a perpetrator to trigger a service failure.
The vulnerability of the gffilterpidinstswapdeletetask function in the filtercore/filterpid.c file of the MP4Box package for the GPAC multimedia platform is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...