Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2026/10/21 3:18 a.m.•3 views

CVE-2026-92822

A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content...

6.2CVSS5.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/21 3:18 a.m.•5 views

CVE-2026-92822 Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml

A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content...

6.2CVSS
SaveExploits0References2
CVE
CVE
•added 2026/10/21 3:18 a.m.•4 views

CVE-2026-92822

A flaw exists in libmodulemd where parsing module metadata lacks a recursion-depth or node-count limit when converting the xmd field into nested GVariant values via recursive YAML mapping. An attacker providing a crafted modulemd YAML with deeply nested xmd content can trigger stack exhaustion or...

6.2CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/16 1:10 a.m.•12 views

Malware in xmd-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/10/16 1:10 a.m.•11 views

MAL-2026-17892 Malicious code in xmd-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a85f0f80af9a736d2f4a26eb74220eeaa0f7deb07ff911a822221a980f78df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2019/05/24 5:29 p.m.•14 views

CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can...

5.3CVSS5.6AI score0.00971EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/05/24 12:00 a.m.•20 views

Bitdefender Engines iso.xmd Parser Out-of-Bounds Read Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An out-of-bounds read vulnerability exists in the iso.xmd parser in Bitdefender Engines versions prior to 7.76662, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

5.3CVSS7.4AI score0.00928EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2017/12/21 2:29 p.m.•10 views

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS6.2AI score0.03675EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2017/12/21 2:29 p.m.•10 views

CVE-2017-17408

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

9.3CVSS6.3AI score0.06487EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2017/12/21 2:29 p.m.•24 views

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

8.8CVSS6.1AI score0.03675EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/19 12:00 a.m.•14 views

Bitdefender Internet Security integer overflow vulnerability (CNVD-2017-38113)

BitDefender Internet Security is security software that offers a wide range of protection features. An integer overflow vulnerability exists in the cevakrnl.xmd file in Bitdefender Internet Security due to the program failing to adequately validate user-supplied data. A remote attacker could...

9.3CVSS7.9AI score0.03855EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/12/19 12:00 a.m.•24 views

BitDefender Internet Security Remote Code Execution Vulnerability

BitDefender Internet Security is security software that offers a wide range of protection features. A remote code execution vulnerability exists in the cevakrnl.xmd file in Bitdefender Internet Security due to the program failing to adequately validate user-supplied data. A remote attacker could...

9.3CVSS8.4AI score0.03675EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/10/31 7:29 p.m.•20 views

CVE-2017-10954

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet Security 2018 prior to build 7.72918. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

8.8CVSS6.2AI score0.04021EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/21 12:00 a.m.•10 views

Bitdefender Internet Security RAR STM Record Integer Overflow Vulnerability

Bitdefender Internet Security is a suite of security protection solutions. An integer overflow vulnerability exists in Bitdefender Internet Security rar.xmd. A remote attacker can exploit the vulnerability by submitting a specially crafted request to execute arbitrary code in the SYSTEM context...

8AI score
SaveExploits0References1
seebug.org
seebug.org
•added 2007/02/22 12:00 a.m.•23 views

IPSwitch WS-FTP 5.05 (XMD5) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/02/19 12:00 a.m.•58 views

Ipswitch WS_FTP Server 5.05 - XMD5 Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

6.5CVSS5.8AI score0.85519EPSS
SaveExploits10
zdt
zdt
•added 2007/02/19 12:00 a.m.•64 views

IPSwitch WS-FTP 5.05 (XMD5) Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================= IPSwitch WS-FTP 5.05 XMD5 Remote Buffer Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework...

7.1AI score0.85519EPSS
SaveExploits10
Rows per page
Query Builder