https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 13:08:05 +0000 https://vulnerability.circl.lu/sighting/93c59a11-63d9-4f70-984e-8357a45545ad/export {"uuid": "93c59a11-63d9-4f70-984e-8357a45545ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "published-proof-of-concept", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-15T00:00:26.567252Z"} {"uuid": "93c59a11-63d9-4f70-984e-8357a45545ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "published-proof-of-concept", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-15T00:00:26.567252Z"} https://vulnerability.circl.lu/sighting/93c59a11-63d9-4f70-984e-8357a45545ad/export Tue, 15 Sep 2026 00:00:26 +0000 https://vulnerability.circl.lu/sighting/6b345ed8-dea0-4122-9400-e690771e1809/export {"uuid": "6b345ed8-dea0-4122-9400-e690771e1809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-14T03:00:07.986254Z"} {"uuid": "6b345ed8-dea0-4122-9400-e690771e1809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-14T03:00:07.986254Z"} https://vulnerability.circl.lu/sighting/6b345ed8-dea0-4122-9400-e690771e1809/export Mon, 14 Sep 2026 03:00:07 +0000 https://vulnerability.circl.lu/sighting/cc17b3a8-70fb-46a6-ac0f-ebf34e9b0e87/export {"uuid": "cc17b3a8-70fb-46a6-ac0f-ebf34e9b0e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"amisto0x07\", \"Z0mb1E\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses the gefebt.exe component in GE Proficy CIMPLICITY, reachable through the\\n CIMPLICIY CimWebServer. The vulnerable component allows to execute remote BCL files in\\n shared resources. An attacker can abuse this behavior to execute a malicious BCL and\\n drop an arbitrary EXE. The last one can be executed remotely through the WebView server.\\n This module has been tested successfully in GE Proficy CIMPLICITY 7.5 with the embedded\\n CimWebServer. This module starts a WebDAV server to provide the malicious BCL files. If\\n the target does not have the WebClient service enabled, an external SMB service is necessary.\", \"disclosure_date\": \"2014-01-23\", \"fullname\": \"exploit/windows/scada/ge_proficy_cimplicity_gefebt\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"GE Proficy CIMPLICITY gefebt.exe Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {}, \"path\": \"/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/scada/ge_proficy_cimplicity_gefebt\", \"references\": [\"CVE-2014-0750\", \"ZDI-14-015\", \"URL-http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"GE Proficy CIMPLICITY 7.5 (embedded CimWebServer)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:28.582028Z"} {"uuid": "cc17b3a8-70fb-46a6-ac0f-ebf34e9b0e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"amisto0x07\", \"Z0mb1E\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses the gefebt.exe component in GE Proficy CIMPLICITY, reachable through the\\n CIMPLICIY CimWebServer. The vulnerable component allows to execute remote BCL files in\\n shared resources. An attacker can abuse this behavior to execute a malicious BCL and\\n drop an arbitrary EXE. The last one can be executed remotely through the WebView server.\\n This module has been tested successfully in GE Proficy CIMPLICITY 7.5 with the embedded\\n CimWebServer. This module starts a WebDAV server to provide the malicious BCL files. If\\n the target does not have the WebClient service enabled, an external SMB service is necessary.\", \"disclosure_date\": \"2014-01-23\", \"fullname\": \"exploit/windows/scada/ge_proficy_cimplicity_gefebt\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"GE Proficy CIMPLICITY gefebt.exe Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {}, \"path\": \"/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/scada/ge_proficy_cimplicity_gefebt\", \"references\": [\"CVE-2014-0750\", \"ZDI-14-015\", \"URL-http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"GE Proficy CIMPLICITY 7.5 (embedded CimWebServer)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:28.582028Z"} https://vulnerability.circl.lu/sighting/cc17b3a8-70fb-46a6-ac0f-ebf34e9b0e87/export Tue, 08 Sep 2026 06:52:28 +0000 https://vulnerability.circl.lu/sighting/4fa9160e-7b63-4694-903e-f559fb11c226/export {"uuid": "4fa9160e-7b63-4694-903e-f559fb11c226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"regenrecht\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found on Firefox 17.0 (< 17.0.2), specifically\\n a use-after-free of an Element object, when using the serializeToStream method\\n with a specially crafted OutputStream defining its own write function. This module\\n has been tested successfully with Firefox 17.0.1 ESR, 17.0.1 and 17.0 on Windows XP\\n SP3.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/windows/browser/mozilla_firefox_xmlserializer\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox XMLSerializer Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/mozilla_firefox_xmlserializer\", \"references\": [\"CVE-2013-0753\", \"OSVDB-89021\", \"BID-57209\", \"ZDI-13-006\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-16.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=814001\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Firefox 17 / Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:06.843717Z"} {"uuid": "4fa9160e-7b63-4694-903e-f559fb11c226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"regenrecht\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found on Firefox 17.0 (< 17.0.2), specifically\\n a use-after-free of an Element object, when using the serializeToStream method\\n with a specially crafted OutputStream defining its own write function. This module\\n has been tested successfully with Firefox 17.0.1 ESR, 17.0.1 and 17.0 on Windows XP\\n SP3.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/windows/browser/mozilla_firefox_xmlserializer\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox XMLSerializer Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/mozilla_firefox_xmlserializer\", \"references\": [\"CVE-2013-0753\", \"OSVDB-89021\", \"BID-57209\", \"ZDI-13-006\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-16.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=814001\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Firefox 17 / Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:06.843717Z"} https://vulnerability.circl.lu/sighting/4fa9160e-7b63-4694-903e-f559fb11c226/export Tue, 08 Sep 2026 06:51:06 +0000 https://vulnerability.circl.lu/sighting/4a7df85c-a4ac-400d-be30-03c810f21a5a/export {"uuid": "4a7df85c-a4ac-400d-be30-03c810f21a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Alexander Gavrun\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Adobe Flash\\n Player. By supplying a corrupt .mp4 file loaded by Flash, it\\n is possible to gain arbitrary remote code execution under the\\n context of the user.\\n\\n This vulnerability has been exploited in the wild as part of\\n the \\\"Iran's Oil and Nuclear Situation.doc\\\" e-mail attack.\\n According to the advisory, 10.3.183.15 and 11.x before\\n 11.1.102.62 are affected.\", \"disclosure_date\": \"2012-02-15\", \"fullname\": \"exploit/windows/browser/adobe_flash_mp4_cprt\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player MP4 'cprt' Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_flash_mp4_cprt\", \"references\": [\"CVE-2012-0754\", \"OSVDB-79300\", \"BID-52034\", \"URL-http://contagiodump.blogspot.com/2012/03/mar-2-cve-2012-0754-irans-oil-and.html\", \"URL-http://www.adobe.com/support/security/bulletins/apsb12-03.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3 with msvcrt ROP\", \"IE 8 on Windows XP SP3 with JRE ROP\", \"IE 7 on Windows Vista\", \"IE 8 on Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.433025Z"} {"uuid": "4a7df85c-a4ac-400d-be30-03c810f21a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Alexander Gavrun\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Adobe Flash\\n Player. By supplying a corrupt .mp4 file loaded by Flash, it\\n is possible to gain arbitrary remote code execution under the\\n context of the user.\\n\\n This vulnerability has been exploited in the wild as part of\\n the \\\"Iran's Oil and Nuclear Situation.doc\\\" e-mail attack.\\n According to the advisory, 10.3.183.15 and 11.x before\\n 11.1.102.62 are affected.\", \"disclosure_date\": \"2012-02-15\", \"fullname\": \"exploit/windows/browser/adobe_flash_mp4_cprt\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player MP4 'cprt' Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_flash_mp4_cprt\", \"references\": [\"CVE-2012-0754\", \"OSVDB-79300\", \"BID-52034\", \"URL-http://contagiodump.blogspot.com/2012/03/mar-2-cve-2012-0754-irans-oil-and.html\", \"URL-http://www.adobe.com/support/security/bulletins/apsb12-03.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3 with msvcrt ROP\", \"IE 8 on Windows XP SP3 with JRE ROP\", \"IE 7 on Windows Vista\", \"IE 8 on Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.433025Z"} https://vulnerability.circl.lu/sighting/4a7df85c-a4ac-400d-be30-03c810f21a5a/export Tue, 08 Sep 2026 06:50:57 +0000 https://vulnerability.circl.lu/sighting/d975203b-9ef1-4d3b-be9b-6b267a905a5c/export {"uuid": "d975203b-9ef1-4d3b-be9b-6b267a905a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"mr_me \", \"John Poulin (forced-request)\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a remote code execution vulnerability in the explicit render\\n method when leveraging user parameters.\\n This module has been tested across multiple versions of Ruby on Rails.\\n The technique used by this module requires the specified\\n endpoint to be using dynamic render paths, such as the following example:\\n\\n def show\\n render params[:id]\\n end\\n\\n Also, the vulnerable target will need a POST endpoint for the TempFile upload, this\\n can literally be any endpoint. This module doesnt use the log inclusion method of\\n exploitation due to it not being universal enough. Instead, a new code injection\\n technique was found and used whereby an attacker can upload temporary image files\\n against any POST endpoint and use them for the inclusion attack. Finally, you only\\n get one shot at this if you are testing with the builtin rails server, use caution.\", \"disclosure_date\": \"2016-10-16\", \"fullname\": \"exploit/multi/http/rails_dynamic_render_code_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Ruby on Rails Dynamic Render File Upload Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb\", \"platform\": \"BSD,Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/rails_dynamic_render_code_exec\", \"references\": [\"CVE-2016-0752\", \"URL-https://groups.google.com/forum/#!topic/rubyonrails-security/335P1DcLG00\", \"URL-https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/\", \"URL-https://gist.github.com/forced-request/5158759a6418e6376afb\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Ruby on Rails 4.0.8 July 2, 2014\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:10.544471Z"} {"uuid": "d975203b-9ef1-4d3b-be9b-6b267a905a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"mr_me \", \"John Poulin (forced-request)\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a remote code execution vulnerability in the explicit render\\n method when leveraging user parameters.\\n This module has been tested across multiple versions of Ruby on Rails.\\n The technique used by this module requires the specified\\n endpoint to be using dynamic render paths, such as the following example:\\n\\n def show\\n render params[:id]\\n end\\n\\n Also, the vulnerable target will need a POST endpoint for the TempFile upload, this\\n can literally be any endpoint. This module doesnt use the log inclusion method of\\n exploitation due to it not being universal enough. Instead, a new code injection\\n technique was found and used whereby an attacker can upload temporary image files\\n against any POST endpoint and use them for the inclusion attack. Finally, you only\\n get one shot at this if you are testing with the builtin rails server, use caution.\", \"disclosure_date\": \"2016-10-16\", \"fullname\": \"exploit/multi/http/rails_dynamic_render_code_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Ruby on Rails Dynamic Render File Upload Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb\", \"platform\": \"BSD,Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/rails_dynamic_render_code_exec\", \"references\": [\"CVE-2016-0752\", \"URL-https://groups.google.com/forum/#!topic/rubyonrails-security/335P1DcLG00\", \"URL-https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/\", \"URL-https://gist.github.com/forced-request/5158759a6418e6376afb\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Ruby on Rails 4.0.8 July 2, 2014\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:10.544471Z"} https://vulnerability.circl.lu/sighting/d975203b-9ef1-4d3b-be9b-6b267a905a5c/export Tue, 08 Sep 2026 06:50:10 +0000 https://vulnerability.circl.lu/sighting/c8474859-627e-4fc2-bdf0-cf5af667d756/export {"uuid": "c8474859-627e-4fc2-bdf0-cf5af667d756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n the user has installed Flash. No memory corruption is used.\\n\\n First, a Flash object is cloned into the anonymous content of the SVG\\n \\\"use\\\" element in the (CVE-2013-0758). From there, the Flash object\\n can navigate a child frame to a URL in the chrome:// scheme.\\n\\n Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n around the child frame's window reference and inject code into the chrome://\\n context. Once we have injection into the chrome execution context, we can write\\n the payload to disk, chmod it (if posix), and then execute.\\n\\n Note: Flash is used here to trigger the exploit but any Firefox plugin\\n with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.137342Z"} {"uuid": "c8474859-627e-4fc2-bdf0-cf5af667d756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n the user has installed Flash. No memory corruption is used.\\n\\n First, a Flash object is cloned into the anonymous content of the SVG\\n \\\"use\\\" element in the (CVE-2013-0758). From there, the Flash object\\n can navigate a child frame to a URL in the chrome:// scheme.\\n\\n Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n around the child frame's window reference and inject code into the chrome://\\n context. Once we have injection into the chrome execution context, we can write\\n the payload to disk, chmod it (if posix), and then execute.\\n\\n Note: Flash is used here to trigger the exploit but any Firefox plugin\\n with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.137342Z"} https://vulnerability.circl.lu/sighting/c8474859-627e-4fc2-bdf0-cf5af667d756/export Tue, 08 Sep 2026 06:49:36 +0000 https://vulnerability.circl.lu/sighting/28f13540-1720-4d85-90d5-5da658619980/export {"uuid": "28f13540-1720-4d85-90d5-5da658619980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n the user has installed Flash. No memory corruption is used.\\n\\n First, a Flash object is cloned into the anonymous content of the SVG\\n \\\"use\\\" element in the (CVE-2013-0758). From there, the Flash object\\n can navigate a child frame to a URL in the chrome:// scheme.\\n\\n Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n around the child frame's window reference and inject code into the chrome://\\n context. Once we have injection into the chrome execution context, we can write\\n the payload to disk, chmod it (if posix), and then execute.\\n\\n Note: Flash is used here to trigger the exploit but any Firefox plugin\\n with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.063849Z"} {"uuid": "28f13540-1720-4d85-90d5-5da658619980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n the user has installed Flash. No memory corruption is used.\\n\\n First, a Flash object is cloned into the anonymous content of the SVG\\n \\\"use\\\" element in the (CVE-2013-0758). From there, the Flash object\\n can navigate a child frame to a URL in the chrome:// scheme.\\n\\n Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n around the child frame's window reference and inject code into the chrome://\\n context. Once we have injection into the chrome execution context, we can write\\n the payload to disk, chmod it (if posix), and then execute.\\n\\n Note: Flash is used here to trigger the exploit but any Firefox plugin\\n with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.063849Z"} https://vulnerability.circl.lu/sighting/28f13540-1720-4d85-90d5-5da658619980/export Tue, 08 Sep 2026 06:49:36 +0000 https://vulnerability.circl.lu/sighting/1ea304ed-3728-46c8-96f2-5c4cb7f61142/export {"uuid": "1ea304ed-3728-46c8-96f2-5c4cb7f61142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2 .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n 5.0 MEDIUM\n\n An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n 5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n 4.3 MEDIUM\n\nxcb 1.14\n Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n 5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1. 2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n 7.5 HIGH\n\n In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n 6.9 MEDIUM\n\nxineramapro to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n 6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:33.568415Z"} {"uuid": "1ea304ed-3728-46c8-96f2-5c4cb7f61142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2 .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n 5.0 MEDIUM\n\n An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n 5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n 4.3 MEDIUM\n\nxcb 1.14\n Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n 5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1. 2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n 7.5 HIGH\n\n In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n 6.9 MEDIUM\n\nxineramapro to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n 6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:33.568415Z"} https://vulnerability.circl.lu/sighting/1ea304ed-3728-46c8-96f2-5c4cb7f61142/export Mon, 07 Sep 2026 01:00:33 +0000 https://vulnerability.circl.lu/sighting/9489bc51-13fb-41cc-9f33-907a5a9370b8/export {"uuid": "9489bc51-13fb-41cc-9f33-907a5a9370b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2 .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n 5.0 MEDIUM\n\n An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n 5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n 4.3 MEDIUM\n\nxcb 1.14\n Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n 5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1. 2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n 7.5 HIGH\n\n In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n 6.9 MEDIUM\n\nxineramapro to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n 6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T05:00:06.722061Z"} {"uuid": "9489bc51-13fb-41cc-9f33-907a5a9370b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2 .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n 5.0 MEDIUM\n\n An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n 5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n 4.3 MEDIUM\n\nxcb 1.14\n Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n 5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1. 2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n 7.5 HIGH\n\n In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n 6.9 MEDIUM\n\nxineramapro to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n 6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T05:00:06.722061Z"} https://vulnerability.circl.lu/sighting/9489bc51-13fb-41cc-9f33-907a5a9370b8/export Sun, 06 Sep 2026 05:00:06 +0000