https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 19:48:20 +0000 https://db.gcve.eu/sighting/d5c2faa1-071e-4c4d-ae14-0354f58bea15/export {"uuid": "d5c2faa1-071e-4c4d-ae14-0354f58bea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25668", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2017", "content": "#exploit\nCVE-2020-25668:\nLinux kernel 5.9.2 concurrency UaF in vt\nhttps://seclists.org/oss-sec/2020/q4/84", "creation_timestamp": "2024-09-28T17:43:24.000000Z"} {"uuid": "d5c2faa1-071e-4c4d-ae14-0354f58bea15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25668", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2017", "content": "#exploit\nCVE-2020-25668:\nLinux kernel 5.9.2 concurrency UaF in vt\nhttps://seclists.org/oss-sec/2020/q4/84", "creation_timestamp": "2024-09-28T17:43:24.000000Z"} https://db.gcve.eu/sighting/d5c2faa1-071e-4c4d-ae14-0354f58bea15/export Sat, 28 Sep 2024 17:43:24 +0000 https://db.gcve.eu/sighting/5fe60ab9-e862-45db-8c42-26dff9d4de4e/export {"uuid": "5fe60ab9-e862-45db-8c42-26dff9d4de4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25669", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7352", "content": "#Threat_Research\n1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel\nhttps://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability\n2. Zeek-Formatted Threat Intelligence Feeds\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds", "creation_timestamp": "2022-12-13T11:01:01.000000Z"} {"uuid": "5fe60ab9-e862-45db-8c42-26dff9d4de4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25669", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7352", "content": "#Threat_Research\n1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel\nhttps://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability\n2. Zeek-Formatted Threat Intelligence Feeds\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds", "creation_timestamp": "2022-12-13T11:01:01.000000Z"} https://db.gcve.eu/sighting/5fe60ab9-e862-45db-8c42-26dff9d4de4e/export Tue, 13 Dec 2022 11:01:01 +0000 https://db.gcve.eu/sighting/75f32b2a-bf00-49c2-b87f-1c2947a450b6/export {"uuid": "75f32b2a-bf00-49c2-b87f-1c2947a450b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25669", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1758", "content": "#Threat_Research\n1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel\nhttps://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability\n2. Zeek-Formatted Threat Intelligence Feeds\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds", "creation_timestamp": "2022-12-13T04:12:39.000000Z"} {"uuid": "75f32b2a-bf00-49c2-b87f-1c2947a450b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25669", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1758", "content": "#Threat_Research\n1. Exploitable memory corruption using CVE-2020-25669 and Linux Kernel\nhttps://www.synopsys.com/blogs/software-security/cyrc-case-study-linux-kernel-vulnerability\n2. Zeek-Formatted Threat Intelligence Feeds\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds", "creation_timestamp": "2022-12-13T04:12:39.000000Z"} https://db.gcve.eu/sighting/75f32b2a-bf00-49c2-b87f-1c2947a450b6/export Tue, 13 Dec 2022 04:12:39 +0000 https://db.gcve.eu/sighting/f47946fb-a785-4fca-9efa-d0de18a8f23d/export {"uuid": "f47946fb-a785-4fca-9efa-d0de18a8f23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25665", "type": "seen", "source": "https://t.me/cibsecurity/17453", "content": "\u203c CVE-2020-25665 \u203c\n\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:34:55.000000Z"} {"uuid": "f47946fb-a785-4fca-9efa-d0de18a8f23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25665", "type": "seen", "source": "https://t.me/cibsecurity/17453", "content": "\u203c CVE-2020-25665 \u203c\n\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:34:55.000000Z"} https://db.gcve.eu/sighting/f47946fb-a785-4fca-9efa-d0de18a8f23d/export Wed, 09 Dec 2020 07:34:55 +0000 https://db.gcve.eu/sighting/bde71232-fb1b-44d0-8af3-5e71b1549cf3/export {"uuid": "bde71232-fb1b-44d0-8af3-5e71b1549cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25665", "type": "seen", "source": "https://t.me/cibsecurity/17311", "content": "\u203c CVE-2020-25665 \u203c\n\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T00:36:38.000000Z"} {"uuid": "bde71232-fb1b-44d0-8af3-5e71b1549cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25665", "type": "seen", "source": "https://t.me/cibsecurity/17311", "content": "\u203c CVE-2020-25665 \u203c\n\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T00:36:38.000000Z"} https://db.gcve.eu/sighting/bde71232-fb1b-44d0-8af3-5e71b1549cf3/export Wed, 09 Dec 2020 00:36:38 +0000 https://db.gcve.eu/sighting/a4328a7d-5e43-46e1-9d55-748c036fe68e/export {"uuid": "a4328a7d-5e43-46e1-9d55-748c036fe68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25667", "type": "seen", "source": "https://t.me/cibsecurity/17300", "content": "\u203c CVE-2020-25667 \u203c\n\nTIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `\"dc:format=\\\"image/dng\\\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T00:36:25.000000Z"} {"uuid": "a4328a7d-5e43-46e1-9d55-748c036fe68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25667", "type": "seen", "source": "https://t.me/cibsecurity/17300", "content": "\u203c CVE-2020-25667 \u203c\n\nTIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `\"dc:format=\\\"image/dng\\\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T00:36:25.000000Z"} https://db.gcve.eu/sighting/a4328a7d-5e43-46e1-9d55-748c036fe68e/export Wed, 09 Dec 2020 00:36:25 +0000 https://db.gcve.eu/sighting/f2527337-a673-4aeb-93f8-40cf12e02c8f/export {"uuid": "f2527337-a673-4aeb-93f8-40cf12e02c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25660", "type": "seen", "source": "https://t.me/cibsecurity/16753", "content": "\u203c CVE-2020-25660 \u203c\n\nA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T00:46:10.000000Z"} {"uuid": "f2527337-a673-4aeb-93f8-40cf12e02c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25660", "type": "seen", "source": "https://t.me/cibsecurity/16753", "content": "\u203c CVE-2020-25660 \u203c\n\nA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T00:46:10.000000Z"} https://db.gcve.eu/sighting/f2527337-a673-4aeb-93f8-40cf12e02c8f/export Tue, 24 Nov 2020 00:46:10 +0000 https://db.gcve.eu/sighting/0e922334-a992-4b32-92e6-42077cb4a3d2/export {"uuid": "0e922334-a992-4b32-92e6-42077cb4a3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25661", "type": "seen", "source": "https://t.me/cibsecurity/15919", "content": "\u203c CVE-2020-25661 \u203c\n\nA Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T00:50:03.000000Z"} {"uuid": "0e922334-a992-4b32-92e6-42077cb4a3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25661", "type": "seen", "source": "https://t.me/cibsecurity/15919", "content": "\u203c CVE-2020-25661 \u203c\n\nA Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T00:50:03.000000Z"} https://db.gcve.eu/sighting/0e922334-a992-4b32-92e6-42077cb4a3d2/export Fri, 06 Nov 2020 00:50:03 +0000 https://db.gcve.eu/sighting/df5bc9ca-a7b3-486e-aa1a-a7522c8d3268/export {"uuid": "df5bc9ca-a7b3-486e-aa1a-a7522c8d3268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25662", "type": "seen", "source": "https://t.me/cibsecurity/15909", "content": "\u203c CVE-2020-25662 \u203c\n\nA Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T00:49:47.000000Z"} {"uuid": "df5bc9ca-a7b3-486e-aa1a-a7522c8d3268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25662", "type": "seen", "source": "https://t.me/cibsecurity/15909", "content": "\u203c CVE-2020-25662 \u203c\n\nA Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T00:49:47.000000Z"} https://db.gcve.eu/sighting/df5bc9ca-a7b3-486e-aa1a-a7522c8d3268/export Fri, 06 Nov 2020 00:49:47 +0000