333 matches found
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...
uro
uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...
PT-2026-120627
A use-after-free in the gf filter packet destroy function /filter core/filter pck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
PT-2026-120638
A heap use-after-free in the gf odf ac4 cfg clean list function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-120628
A segmentation violation in the gf isom get esd function /isomedia/isom read.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
PT-2026-120630
A stack overflow in the gf bifs dec node function /bifs/field decode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-119045
A buffer overflow in the gf ac4 parser bs function /media tools/av parsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
PT-2026-119046
A segmentation violation in the gf props equal internal function /filter core/filter props.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...
PT-2026-117534
A use-after-free in the gf filter pid get packet function filter core/filter pid.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted file...
PT-2026-117566
A heap use-after-free in the gf odf ac4 cfg clean list function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-117536
Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box version 2.5-DEV-rev1593-gfe88c3545-master Description A heap buffer overflow occurs in the gf odf ac4 cfg alternative info function located in /odf/descriptors.c. This issue allows an attacker to trigger a Denial of Service...
PT-2026-116126
Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A floating point exception occurs in the gf parse lfrac function utils/error.c when processing a specially crafted MP4 file. The issue is triggered by a zero-denominator fraction string, which leads to a...
PT-2026-111686
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf m2ts decode ait of the file src/media tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to th...
gf
gf Un wrapper attorno a grep per evitare di digitare pattern comuni. Cosa? Perché? Uso grep un sacco. Quando faccio audit di codebase, guardo l'output di meg, o più in generale quando ho a che fare con grandi quantità di dati. Spesso finisco per usare pattern piuttosto complessi come questo: ▶ gr...
PT-2026-110007
Name of the Vulnerable Software and Affected Versions GPAC versions prior to 26.07.1 Description A use after free issue exists in the MP4Box component within the gf fq pop function of the filter core/filter queue.c file. This flaw allows a remote attacker to trigger the condition through specific...
PT-2026-110006
Name of the Vulnerable Software and Affected Versions GPAC versions prior to 26.07.0 Description A use after free issue exists in the MP4Box component within the gf mx v function of the utils/os thread.c file. This flaw allows a remote attacker to trigger the condition through specific...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack through the GF arithmetic and the fixed-weight support sampler in HQCEngine. An attacker can recover information about the HQC private key by observing cache behavior or decapsulation timing while the code processes secret...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack through the GF arithmetic and the fixed-weight support sampler in HQCEngine. An attacker can recover information about the HQC private key by observing cache behavior or decapsulation timing while the code processes secret...
Timing Attack
Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Timing Attack through the GF arithmetic and the fixed-weight support sampler in HQCEngine. An attacker can recover information about the HQC private key...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack through the GF arithmetic and the fixed-weight support sampler in HQCEngine. An attacker can recover information about the HQC private key by observing cache behavior or decapsulation timing while the code processes secret...