Ivan Fratric

Featured in: Favicon

packetstormsecurity.com

Articles

AppleAVD AV1_Syntax::Parse_Header Integer Underflow / Out-Of-Bounds Reads

Dec 2, 2024 | packetstormsecurity.com | Ivan Fratric |Spencer McIntyre

AppleAVD has an integer underflow in AV1_Syntax::Parse_Header that can lead to out-of-bounds reads.
AppleAVD AV1_Syntax::f Out-Of-Bounds Reads

Dec 2, 2024 | packetstormsecurity.com | Ivan Fratric |Spencer McIntyre

what you don't know can hurt you
AppleAVD AV1_Syntax::f Out-Of-Bounds Reads

Dec 2, 2024 | packetstormsecurity.com | Ivan Fratric |Spencer McIntyre

what you don't know can hurt you
macOS AppleGVA Memory Handling

Jan 12, 2024 | packetstormsecurity.com | Ivan Fratric |Fernando Mengali

macOS AppleGVA Memory HandlingAuthored by Ivan Fratric, Google Security ResearchOn Intel macOS, HEVC video decoding is performed in the AppleGVA module. Using fuzzing, researchers identified multiple issues in this decoder. The issues range from out-of-bounds writes, out-of-bounds reads and, in one case, free() on an invalid address. All of the issues were reproduced on macOS Ventura 13.6 running on a 2018 Mac mini (Intel based).
macOS AppleVADriver Out-Of-Bounds Write

Jan 12, 2024 | packetstormsecurity.com | Ivan Fratric |Fernando Mengali

what you don't know can hurt you
MVC Shop 0.5 Directory Traversal

Jun 9, 2023 | packetstormsecurity.com | Ivan Fratric

MVC Shop 0.5 Directory TraversalAuthored by indoushkaMVC Shop version 0.5 suffers from a directory traversal vulnerability.
Debian Security Advisory 5422-1

Jun 9, 2023 | packetstormsecurity.com | Ivan Fratric

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5422-1 [email protected] https://www.debian.org/security/ Aron Xu June 09, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : jupyter-core CVE ID : CVE-2022-39286 Debian Bug : 1023361 It was discovered that jupyter-core, the core common functionality for Jupyter...
Acelle Email Marketing 4.0.25 Arbitrary File Upload

Jun 9, 2023 | packetstormsecurity.com | Ivan Fratric

==================================================================================================================================== | # Title : Acelle Email Marketing 4.0.25 LTS unrestricted file uploads Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 61.0.1 (32-bit) | | # Vendor : https://acellemail.com/ | | # Dork : "Acelle Email Marketing Application by acellemail.com" |...
Ubuntu Security Notice USN-6151-1

Jun 9, 2023 | packetstormsecurity.com | Ivan Fratric

==========================================================================Ubuntu Security Notice USN-6151-1June 08, 2023linux-xilinx-zynqmp vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 20.04 LTSSummary:Several security issues were fixed in the Linux kernel.
Red Hat Security Advisory 2023-3556-01

Jun 9, 2023 | packetstormsecurity.com | Ivan Fratric

-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256===================================================================== Red Hat Security AdvisorySynopsis: Important: python3 security updateAdvisory ID: RHSA-2023:3556-01Product: Red Hat Enterprise LinuxAdvisory URL: https://access.redhat.com/errata/RHSA-2023:3556Issue date: 2023-06-09CVE Names: CVE-2023-24329 =====================================================================1.