RHEL 8 : gstreamer1-plugins-good (RHSA-2026:73040)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73040 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:72482)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72482 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:73424)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73424 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

CVE-2024-10924

PoC para CVE-2024-10924 Un fallo de manejo de errores en la API REST del plugin de WordPress Really Simple Plugins versiones entre la 9.0.0 y la 9.1.1.1, ambas incluidas permite a un atacante, cuando la autenticación de dos factores está habilitada, evadir la autenticación y tomar el control de u...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

volatility-plugins

https://www.countercept.com/blog/hunting-for-gargoyle-memory-scanning-evasion/...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

RHEL 7 : gstreamer1-plugins-good (RHSA-2026:72367)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72367 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

-INE_Shivam_Gupta_23104003

CVE-2021-43798 — Grafana 未认证路径遍历实验环境 仅供教育用途。 仅在隔离的本地机器上运行此实验环境。切勿将其暴露到互联网。 CVE 摘要 字段| 详情 ---|--- CVE ID| CVE-2021-43798 产品| Grafana 受影响版本| 8.0.0 – 8.3.0 已修复版本| 8.3.1+ 严重程度| 高 CVSS v3.1 评分| 7.5 CWE| CWE-22 — 路径遍历 需要认证| 否 攻击向量| 网络 前置条件 Docker Desktop（正在运行） Git curl 环境搭建 git clone...

wordpress-hacking

WordPress 渗透测试 一些用于对 WordPress 及其插件和主题进行渗透测试的有用资源。 漏洞赏金 如果你热衷于发现和报告 WordPress 漏洞，可以考虑加入这些漏洞赏金项目：Wordfence 和 Patchstack。通过我的 Wordfence 链接注册，当你报告 5 个漏洞时我会获得少量奖励，这有助于支持我为社区开发工具和资源的工作。谢谢！ 插件 我编写了一个插件，旨在帮助对 WordPress 插件和主题进行动态分析和渗透测试，它位于本仓库的 plugin 分支中。 报告 reports...

Grafxploit

Grafana CVE-2021-43798 自动利用工具 概述 本项目是一个自动利用工具，旨在扫描并提取存在 CVE-2021-43798 漏洞的 Grafana 实例中的敏感信息。该工具可识别存在漏洞的插件，并提取受感染用户的 SSH 密钥。 功能 自动扫描存在漏洞的 Grafana 实例。 识别存在漏洞的插件。 提取敏感文件，包括 SSH 密钥。 支持单目标和多目标扫描。 可自定义扫描路径列表。 前提条件 Python 3.x 必需的 Python 库：colorama 安装 1. 克隆仓库： git clone...

[SECURITY] Fedora 44 Update: mingw-gstreamer1-plugins-base-1.28.7-1.fc44

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...