CVE-2019-20326

CVE-2019-20326 GNOME gThumb e Linux Mint Pix utilizzano il modulo cairoio per visualizzare diversi formati immagine con la libreria grafica Cairo. Nelle versioni di gThumb 3.8.3 e di Pix 2.4.5, cairoio è vulnerabile a un heap buffer overflow tramite un'immagine JPEG con larghezza o altezza maggio...

Mintinstall-object-injection

TR Linux mint yazılım yöneticisi v 7.9.5/9 yanlış yapılandırmadan dolayı obje enjeksiyonu ve keyfi kod çalıştırmamıza neden olmaktadır. EN Il gestore software di Linux Mint v 7.9.5/9 ci fa eseguire l'iniezione di oggetti e codice arbitrario a causa di una configurazione errata. root@kitploit:...

CVE-2019-18634-writeup

Análise do CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC A opção pwfeedback do sudo pode ser usada para fornecer feedback visual quando o usuário está digitando sua senha. Para cada tecla pressionada, um asterisco é impresso. Esta opção f...

slippy-book-exploit

Slippy-book: EPUB-Dateiparsing – Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076 Atril Reserviert: RCE-Schwachstelle betrifft beliebte Linux-Distributionen, darunter Mint, Kali, Parrot, Manjaro usw. EPUB-Dateiparsing – Directory Traversal Remote Code Execution Ein...

linux_mint_poc

Linux Mint 18.3-19.1 'yelp' 명령 삽입 버그 근본 원인 URI 핸들러 help://, ghelp://, man://는 /usr/share/applications/yelp.desktop 파일에 정의되어 있으며, 해당 URI 핸들러 중 하나가 호출될 때마다 Exec=yelp %u를 통해 /usr/local/bin/yelp를 실행합니다. /usr/local/bin/yelp 파일은 수신된 URI 핸들러 요청을 구문 분석하는 간단한 파이썬 스크립트입니다. 이 스크립트는 먼저 "gnome-help" 및...

Mintinstall-object-injection

Linux Mint 软件管理器（v 7.9.5/9）因配置错误导致对象注入和任意代码执行。 Linux mint software manager v 7.9.5/9 causes us to execute object injection and arbitrary code due to incorrect configuration root@kitploit: mintinsall 当运行 Mint 软件管理器时，它会检查是否有新的评论，如果有新评论，则从 new-reviews.list 下载并写入文件。 If there is a new comment...

Vision-MSI-Thermal-Control

Vision MSI Controllo Termico Gestione termica Linux per MSI Modern 15H AI C1MG-096IT - Controllo EC con reverse engineering, profili ventola e soglia di carica batteria 🎯 Scopo del Progetto Questa applicazione è nata dalla necessità degli utenti di laptop MSI su Linux. Il percorso è iniziato quan...

EUVD-2020-30934

OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting XSS attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicious payload in the query string, leading to execution of JavaScript in the victim's browser. For...

CVE-2020-37041

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences e.g., '../' in the URL. For example, requesting...

PT-2026-5484

Name of the Vulnerable Software and Affected Versions OpenCTI version 3.3.1 Description OpenCTI is susceptible to a reflected cross-site scripting XSS attack through the /graphql API endpoint. An attacker can inject malicious JavaScript code by sending a specially crafted GET request with a paylo...

EUVD-2019-10880

Malware in sbrugna...

EUVD-2024-35857

Malicious code in bioql PyPI...

CVE-2019-17080

mintinstall aka Software Manager 7.9.9 for Linux Mint allows code execution if a REVIEWSCACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports...

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

CVE-2024-36053

CVE-2024-36053 affects the Linux Mint mintupload package up to version 4.2.0, where a service-name mishandling allows command injection via shell metacharacters in functions check_connection, drop_data_received_cb, and Service.remove. An attacker can modify a service name in ~/.linuxmint/mintUplo...

mintupload 安全漏洞

mintupload is an open source library for Linux Mint. A security vulnerability exists in mintupload version 4.2.0 and earlier, which stems from mishandling of service names, which allows a user to modify the name of a service in a file...