Vulnerabilities Lab

A database of zero-day vulnerabilities found by ForAllSecure Mayhem

Filter By:

All years 2021 2020 2019 2018 2017

All Technologies Embedded Systems Serialization File Support Parsing Encryption Computer Graphics Web Server Aerospace

2021

No results for the selected filter.

NGA Six-Library Not Quite Zero-Day

Six-library is a software library published by the US government's National Geospatial-Intelligence Agency (NGA). The six-library is designed to parse and manipulate satellite imagery and data for both internal and public use.

Learn more on the blog See it on Github Watch the webinar

2020

No results for the selected filter.

OpenWRT RCE Zero-Day

OpenWRT is a Linux-based OS often found in embedded devices and network routers.

CVE-2020-7982

Learn more on the blog Read the article

cereal Zero-Day

cereal is a light-weight, general-purpose serialization library.

CVE-2020-11104
CVE-2020-11105

Learn more on the blog Watch the webinar

MP3Gain Zero-Day

MP3Gain analyzes and adjusts MP3 files so that they have the same volume by using statistical analysis to determine what those levels should be.

CVE-2020-15359

Learn more on the blog

GNU C Zero-Day

The GNU C Library (glibc) is one of the most common open source C library used on Linux systems.

CVE-2020-10029

Learn more on the blog See it on Github Watch the webinar

JSON Not Quite Zero-Day

JQ is a very popular JSON parsing library written in C.

Learn more on the blog See it on Github

2019

No results for the selected filter.

Netflix Dial Reference Zero-Day

The DIAL server is commonly found in televisions to support online streaming services.

CVE-2019-10028

Learn more on the blog Read the article See it on Github

Oniguruma Zero-Day

Oniguruma is a regex C library commonly used as a parser in the PHP and Ruby programming language.

CVE-2019-13225
CVE-2019-13224

See it on Github

Matio Zero-Day

MATIO is an open source C library used for parsing MATLAB files.

CVE-2019-13107

Learn more on the blog See it on Github

Das U-Boot Zero-Day

Das U-Boot is a bootloader common in embedded devices, including Amazon Kindles, ARM Chromebooks, networking hardware, and more.

CVE-2019-13103
CVE-2019-13104
CVE-2019-13105
CVE-2019-13106

Learn more on the blog Read the article See it on Github

MatrixSSL & WolfSSL Zero-Day

MatrixSSL and WolfSSL are open source cryptographic library aimed at IoT and other lightweight use cases.

CVE-2019-13470

Learn more on the blog

stb Zero-Day

stb is a suite of single-file C libraries containing utility functions useful to for computer graphics applications or games.

CVE-2019-13217
CVE-2019-13218
CVE-2019-13219
CVE-2019-13220
CVE-2019-13221
CVE-2019-13222
CVE-2019-13223

Learn more on the blog Read the article See it on Github

FreeImage Zero-Day

FreeImage is an open source library for supporting popular graphic image formats, including PNG, BMG, JPEG, TIFF, and more.

CVE-2019-13499 (pending)
CVE-2019-13500 (pending)
CVE-2019-13501 (pending)

Learn more on the blog

2018

No results for the selected filter.

H2O Zero-Day

H2O is an open source HTTP server written in C. H2O is known for its ability to deliver quicker responses to users with less CPU utilization than older generations of web servers.

CVE-2018-0608

Watch the webinar

2017

No results for the selected filter.

sthttpd Zero-Day

sthttpd is an open source web server designed for simplicity, a small execution footprint and speed.

CVE-2017-10671

See it on Github Watch the webinar

Vulnerabilities Lab

2021

NGA Six-Library Not Quite Zero-Day

2020

OpenWRT RCE Zero-Day

cereal Zero-Day

MP3Gain Zero-Day

GNU C Zero-Day

JSON Not Quite Zero-Day

2019

Netflix Dial Reference Zero-Day

Oniguruma Zero-Day

Matio Zero-Day

Das U-Boot Zero-Day

MatrixSSL & WolfSSL Zero-Day

stb Zero-Day

FreeImage Zero-Day

2018

H2O Zero-Day

2017

sthttpd Zero-Day

See What Mayhem Can Do For You

See What Mayhem
Can Do For You