Vulnerabilities Labs | ForAllSecure

Filter By:

2020

OpenWRT RCE Zero-Day

OpenWRT is a Linux-based OS often found in embedded devices and network routers.

CVE-2020-7982

Learn more on the blog Read the article

cereal Zero-Day

cereal is a light-weight, general-purpose serialization library.

Learn more on the blog Read the article Watch the webinar

MP3Gain Zero-Day

MP3Gain analyzes and adjusts MP3 files so that they have the same volume by using statistical analysis to determine what those levels should be.

CVE-2020-15359

Learn more on the blog

GNU C Zero-Day

The GNU C Library (glibc) is one of the most common open source C library used on Linux systems.

CVE-2020-10029

Learn more on the blog See it on Github

JSON Not Quite Zero-Day

JQ is a very popular JSON parsing library written in C.

Learn more on the blog

2019

Netflix Dial Reference Zero-Day

The DIAL server is commonly found in televisions to support online streaming services.

CVE-2019-10028

Learn more on the blog Read the article See it on Github

Oniguruma Zero-Day

Oniguruma is a regex C library commonly used as a parser in the PHP and Ruby programming language.

See it on Github

Matio Zero-Day

MATIO is an open source C library used for parsing MATLAB files.

CVE-2019-13107

Learn more on the blog

Das U-Boot Zero-Day

Das U-Boot is a bootloader common in embedded devices, including Amazon Kindles, ARM Chromebooks, networking hardware, and more.

Learn more on the blog Read the article See it on Github

MatrixSSL & WolfSSL Zero-Day

MatrixSSL and WolfSSL are open source cryptographic library aimed at IoT and other lightweight use cases.

CVE-2019-13470

Learn more on the blog

stb Zero-Day

stb is a suite of single-file C libraries containing utility functions useful to for computer graphics applications or games.

Learn more on the blog Read the article

FreeImage Zero-Day

FreeImage is an open source library for supporting popular graphic image formats, including PNG, BMG, JPEG, TIFF, and more.

CVE-2019-13499 (pending)
CVE-2019-13500 (pending)
CVE-2019-13501 (pending)

Learn more on the blog

2018

H2O Zero-Day

H2O is an open source HTTP server written in C. H2O is known for its ability to deliver quicker responses to users with less CPU utilization than older generations of web servers.

CVE-2018-0608

Watch the webinar

2017

sthttpd Zero-Day

sthttpd is an open source web server designed for simplicity, a small execution footprint and speed.

See it on Github Watch the webinar

Vulnerabilities Lab

2020

OpenWRT RCE Zero-Day

cereal Zero-Day

MP3Gain Zero-Day

GNU C Zero-Day

JSON Not Quite Zero-Day

2019

Netflix Dial Reference Zero-Day

Oniguruma Zero-Day

Matio Zero-Day

Das U-Boot Zero-Day

MatrixSSL & WolfSSL Zero-Day

stb Zero-Day

FreeImage Zero-Day

2018

H2O Zero-Day

2017

sthttpd Zero-Day

See What Mayhem Can Do For You

See What Mayhem
Can Do For You