EUVD-2020-26939

Malware in sbrugna...

EUVD-2020-14421

Malware in sbrugna...

EUVD-2024-21690

Malicious code in bioql PyPI...

HydrAIDE Authentication Bypass Vulnerability

Summary There is no authentication of any kind. Details TLS is implemented, the tunnel between the client and server is secure, however once data is on the server, it's free to be read by any adversaries. On the client side :...

CVE-2020-21651

Myucms v2.2.1 contains a remote code execution RCE vulnerability in the component \controller\point.php, which can be exploited via the add method...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

Double free

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

Memory corruption

gpac v2.2.1 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24266

CVE-2024-24266 affects gpac v2.2.1 with a Use-After-Free (UAF) in dasher_configure_pid (src/filters/dasher.c). Multiple sources (NVD, Red Hat, OSV, CVE lists) confirm the vulnerability in gpac 2.2.1 and attribute it to dasher.c. CVSS v3.1 base score 7.5 (High) with NETWORK attack vector, LOW atta...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24265

CVE-2024-24265 affects gpac v2.2.1, with a memory leak in the gf_filter_pid_merge_properties_internal function caused by the dst_props variable. Several connected sources confirm the issue and its association with gpac 2.2.1, including Red Hat and OSV entries. No public exploit details are provid...

CVE-2024-24267

CVE-2024-24267 affects gpac v2.2.1 , with a memory leak in the gfio_blob variable inside the function gf_fileio_from_blob . Root cause: memory not released, leading to potential resource exhaustion. The issue is mitigated by upgrading to gpac v2.4.0 (fixed). Exploitation details are not provided ...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...