ada-url:parse: Crash in bool ada::url_aggregator::set_host_or_hostname<true>

Detailed Report: https://oss-fuzz.com/testcase?key=5329718332489728 Project: ada-url Fuzzing Engine: centipede Fuzz Target: parse Job Type: centipedeasanada-url Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60b000060000 Crash State: bool ada::urlaggregator::sethostorhostname...

ada-url:parse: Crash in bool ada::url_aggregator::set_host_or_hostname<true>

Project: https://github.com/ada-url/ada.git Detailed Report: https://oss-fuzz.com/testcase?key=5425614048591872 Project: ada-url Fuzzing Engine: libFuzzer Fuzz Target: parse Job Type: libfuzzerubsanada-url Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002e1e000 Crash State: bool...

WordPress Forms Ada Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Forms Ada Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27613 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID e7150cfdbfda Credits Pavak Tiwari Required privilege...

Forms Ada <= 1.0 - Unauthenticated Reflected XSS

The plugin does not sanitize and escape some of it's parameters before reflecting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin...

WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

Software Accessibility Suite by Online ADA Type Plugin Vulnerable versions = 4.12 Fixed in 4.13 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47420 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID cf5c7e0f9b45 Credits minhtuanact Required...

fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime

Summary Fuzz testing on crossplane/crossplane, by Ada Logics and sponsored by the CNCF, identified input to a function in the fieldpath package that can cause an out of memory panic. Applications that use the Paved type's SetValue method with user provided input without proper validation might us...

gcc-toolset-12-gcc bug fix update

An update is available for gcc-toolset-12-gcc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset 12 is a compiler toolset that provides recent versions...

gcc bug fix and enhancement update

An update is available for gcc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ad...

CVE-2014-125063

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

Sql injection

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

CVE-2014-125063

The CVE-2014-125063 entry concerns ada-l0velace Bid with a reported SQL injection in an unknown processing path. The vulnerability is described as critical, with a patch identified as abd71140b8219fa8741d0d8a57ab27d5bfd34222 and an assigned vulnerability ID VDB-217625. Public documents consistent...

CVE-2014-125063 ada-l0velace Bid sql injection

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

CVE-2014-125063 ada-l0velace Bid sql injection

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

CVE-2014-125063

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

Bid Project SQL Injection Vulnerability

Bid Project is a project of ada-l0velace individual developer. Bid Project suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to perform a sql injection attack...

CVE-2014-125063: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is abd71140b8219fa8741d0d8a57ab27d5bfd34222. It is recommended to apply a patch to fix this issue. The...

PT-2023-10133 · Unknown · Ada-L0Velace Bid

Name of the Vulnerable Software and Affected Versions: ada-l0velace Bid affected versions not specified Description: A critical issue was found in the software, affecting some unknown processing, which leads to sql injection. Recommendations: At the moment, there is no information about a newer...

ada-tray.com Cross Site Scripting vulnerability OBB-3118161

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Helm vulnerable to denial of service through schema file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the chartutil package that can cause a segmentation violation. Applications that use functions from the chartutil package in the Helm SDK can have a Denial of Service attack when they use this package and it...

Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...