imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717227240685568 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in learn_check

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5744553198354432 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

perfetto/buffered_frame_deserializer_fuzzer: Heap-buffer-overflow in buffered_frame_deserializer_fuzzer.cc

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5650778761461760 Project: perfetto Fuzzer: libFuzzerperfettobufferedframedeserializerfuzzer Fuzz target binary: bufferedframedeserializerfuzzer Job Type: libfuzzerasanperfetto...

Wireshark - find_signature Heap Out-of-Bounds Read

Wireshark - findsignature Heap Out-of-Bounds Read The following crash due to a heap-based out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==35788==ERROR: AddressSanitizer:...

Mozilla Firefox 63.0.1 - Denial of Service (PoC)

Mozilla Firefox 63.0.1 - Denial of Service PoC Exploit Title: Mozilla Firefox 63.0.1 - Denial of Service PoC Date: 2018-11-29 Exploit Author: SAIKUMAR CHEBROLU Vendor Homepage: https://www.mozilla.org/en-US/firefox/new/ Bugzilla report: https://bugzilla.mozilla.org/showbug.cgi?id=1504512 Version:...

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in QueryColorname

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5724087586914304 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkTHashTable<SkGlyph, SkPackedGlyphID, SkGlyph::HashTraits>::Hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5684936837693440 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2018-19335

Google Monorail before 2018-06-07 has a Cross-Site Search XS-Search vulnerability because CSV downloads are affected by CSRF, and calculations of download times for requests with a crafted groupby value can be used to obtain sensitive information about the content of bug reports...

CVE-2018-10099

Google Monorail before 2018-04-04 has a Cross-Site Search XS-Search vulnerability because CSV downloads are affected by CSRF, and calculations of download times for requests with duplicated columns can be used to obtain sensitive information about the content of bug reports...

Google Monorail Cross-Site Search Vulnerability (CNVD-2018-23926)

Google Monorail is an issue tracker from Google USA. A security vulnerability exists in versions of Google Monorail prior to 2018-05-04. An attacker can exploit the vulnerability to obtain sensitive information about bug reports...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5658693757042688 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in flow_union_with_miniflow_subset

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5713500089876480 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in r_bin_mdmp_init_pe_bins

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5664529107648512 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61900004dcb4...

CVE-2018-18873

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function rasputdatastd in ras/rasenc.c...

mupdf/pdf_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5658375946240000 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Reproducer...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in AAT::KerxSubTableFormat6::get_kerning

Detailed report: https://oss-fuzz.com/testcase?key=5634395566768128 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::identify

Detailed report: https://oss-fuzz.com/testcase?key=5071707965489152 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openvswitch/odp_target: Use-of-uninitialized-value in nl_attr_get_size

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5715163836055552 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value...

harfbuzz/hb-shape-fuzzer: Crash in BEInt<int, 4>::operator int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695615258853376 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

dev.cntraveller.in XSS vulnerability

Open Bug Bounty ID: OBB-683142 Description| Value ---|--- Affected Website:| dev.cntraveller.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...