{"uuid": "2f3928fa-cceb-4b56-b2bb-a42182dc18ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13776", "type": "seen", "source": "https://t.me/hacking_Attack/45702", "content": "Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nExample: \n $ python3 master_librarian.py -t csv\n $ python3 master_librarian.py -t txt -l 3\n\nMaster librarian v0.3\n Tool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nSearch pitfalls in operational system local packages\n\nxres 1.2.0\ncairo-ps 1.16.0\nxf86vidmodeproto 2.3.1\nlibcrypto 1.1.1f\ndamageproto 1.2.1\nlibffi 3.3\nxfixes 5.0.3\n  Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-7944\n  7.5 HIGH\n\nsystem.web.extensions.design_1.0 1.0.61025.0\nkbproto 1.0.7\ngio-unix-2.0 2.64.6\ngdk-x11-2.0 2.24.32\nsqlite3 3.31.1\ncairo-png 1.16.0\nlib   pcre2-posix 10.34\nwcf 6.8.0.105\ndmxproto 2.3.1\ncairo-script 1.16.0\nxext 1.3.4\nx11 1.6.9\nsystem.web.mvc 1.0.0.0\nmono-cairo 6.8.0.105\ncecil 6.8.0.105\nudev 245\n  The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.\n  https://nvd.nist.gov/vuln/detail/CVE-2011-0640\n  6.9 MEDIUM\n\n  plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.\n  https://nvd.nist.gov/vuln/detail/CVE-2010-4176\n  4.0 MEDIUM\n\nxkeyboard-config 2.29\nbash-completion 2.10\nyelp-xsl 3.36.0   \nxdamage 1.1.5\nlibgdiplus 6.0.4\nicu-uc 66.1\nxcomposite 0.4.5\nharfbuzz 2.6.4\npixman-1 0.38.4\npthread-stubs 0.4\nsystemd 245\n  An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13529\n  2.9 LOW\n\n  systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-13776\n  6.2 MEDIUM\n\n  A heap use-after-free vulnerability was found in systemd before version v245-rc1, where    asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-1712\n  4.6 MEDIUM\n\nexpat 2.2.9\npangocairo 1.44.7\nxdmcp 1.1.3\nlibpcreposix 8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86d   gaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:04.792984Z"}