{"uuid": "91afa5e8-7cfc-4a59-9223-a91ab58e0794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13776", "type": "seen", "source": "https://t.me/hacking_Attack/45721", "content": "KitPloit - PenTest Tools!\nMaster_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjsrmhQfDtTdfBPNa6qZgsSf3u30VLPYC3uKiVcyq9ZGHj16L1OT3WrO1HfwDyWXqnHKHPKJbSTz2Whniw57u-WtS5y_mcQsWyfzNYadEoNL2ZgYGTEeORZsjTrJzIDyx8ZUunfcL0CntifHoVg48hyGjYPR8doMybpPRTOwLUqmaUvooKWE3KXcFIO=w640-h480 A simple tool to audit Unix/*BSD/Linux system libraries to find public security vulnerabilities.\nTo install requirements: $ sudo python3 -m pip install -r requirements.txt Overview:\n\nvulnerabilities on local libraries  by CoolerVoid    Example:    $ python3 master_librarian.py -t csv   $ python3 master_librarian.py -t txt -l 3    usage: master_librarian.py [-h] -t TYPES [-l LIMIT]    optional arguments:    -h, --help            show this help message and exit    -t TYPES, --type TYPES                          Name of output type for logs(txt or csv)    -l LIMIT, --limit LIMIT                          Limit CVEs per pages in nvd NIST search(default is 3)  \">$ python3 master_librarian.py -h\nMaster librarian v0.3 \nTool to search public vulnerabilities on local libraries\nby CoolerVoid\n\nExample: \n$ python3 master_librarian.py -t csv\n$ python3 master_librarian.py -t txt -l 3\n\nusage: master_librarian.py [-h] -t TYPES [-l LIMIT]\n\noptional arguments:\n-h, --help            show this help message and exit\n-t TYPES, --type TYPES\nName of output type for logs(txt or csv)\n-l LIMIT, --limit LIMIT\nLimit CVEs per pages in nvd NIST search(default is 3) \n\nExample: $ python3 master_librarian.py -t txt output\n\nvulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.    https://nvd.nist.gov/vuln/detail/CVE-2020-13529    2.9 LOW      systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.    https://nvd.nist.gov/vuln/detail/CVE-2020-13776    6.2 MEDIUM      A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.    https://nvd.nist.gov/vuln/detail/CVE-2020-1712    4.6 MEDIUM    expat 2.2.9  pangocairo 1.44.7  xdmcp 1.1.3  libpcreposix 8.39  ruby-2.7 2.7.0  glib-2.0 2.64.6  gnome-system-tools 3.0.0  xinerama 1.1.4  nunit 2.6.3  gmp 6.2.0  libevent 2.1.11-stable  xbuild12 12.0  xorg-sgml-doctools 1.11  presentproto 1.2  gdk-pixbuf-2.0 2.40.0  inputproto 2.3.2  libssl 1.1.1f  xcb-shm 1.14  gdk-2.0 2.24.32  libpng16 1.6.37  bigreqsproto 1.1.2  icu-io 66.1  xextproto 7.3.0  libthai 0.1.28  libbsd-overlay 0.10.0  mount 2.34.0  gio-2.0 2.64.6  adwaita-icon-theme 3.36.1  fontconfig 2.13.1  xrandr 1.5.2  monosgen-2 6.8.0.105  mono 6.8.0.105  xf86dgaproto 2.1  dri3proto 1.2  libpcre 8.39  pangoxft 1.44.7  blkid 2.34.0  libsepol 3.0  libevent_openssl 2.1.11-stable  uuid 2.34.0  gmodule-2.0 2.64.6  graphite2 3.0.1  libfl 2.6.4  zlib 1.2.11  cairo-pdf 1.16.0  ruby 2.7.0    Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource co[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:51.128212Z"}