Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS

Multiple cross-site scripting vulnerabilities in Testimonials Widget 3.5.1 and lower allow remote attackers to inject arbitrary Javascript code or HTML via the below parameters: - Author - Job Title - Location - Company - Email - URL Successful exploitation of this vulnerability would allow...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5476428945817600 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: dewarpfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow...

Cisco Warns of High-Severity Bug in Small Business Switch Lineup

Cisco Systems is warning of a high-severity flaw affecting more than a half-dozen of its small business switches. The flaw could allow remote, unauthenticated attackers to access the switches’ management interfaces with administrative privileges. Specifically affected are Series Smart Switches,...

libraw:libraw_raf_fuzzer: Index-out-of-bounds in DHT::hide_hots

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6229491834945536 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_setup_iax

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5660728708300800 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000bd...

c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in blosc_run_decompression_with_context

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4799687189331968 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

glib:fuzz_uri_escape: Heap-buffer-overflow in uri_decoder

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4881440516079616 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzuriescape Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

glib:fuzz_uri_parse: Heap-buffer-overflow in g_string_insert_len

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4902921962782720 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparse Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x602000000134 Crash...

glib:fuzz_uri_parse_params: Heap-buffer-overflow in uri_decoder

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4815738421641216 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparseparams Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000d2 Cra...

libfdk-aac:aacDecoder_DecodeFrame: Stack-buffer-overflow in Pred_lt4

Detailed Report: https://oss-fuzz.com/testcase?key=5697795251240960 Project: libfdk-aac Fuzzing Engine: libFuzzer Fuzz Target: aacDecoderDecodeFrame Job Type: libfuzzerasani386libfdk-aac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0xfffcb3d4 Crash State: Predlt4...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

augeas:augeas_api_fuzzer: Crash in eval_expr

Detailed Report: https://oss-fuzz.com/testcase?key=5971328632094720 Project: augeas Fuzzing Engine: libFuzzer Fuzz Target: augeasapifuzzer Job Type: libfuzzerasanaugeas Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60340000aa1c Crash State: evalexpr evalbinary evalexpr Sanitizer:...

binutils:fuzz_bfd: Use-of-uninitialized-value in _bfd_pei_slurp_codeview_record

Detailed Report: https://oss-fuzz.com/testcase?key=5941009199661056 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdpeislurpcodeviewrecord pebfdreadbuildid...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5970349664763904 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5081162166042624 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow rasteropLow...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5681725698211840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

kubernetes:json_FuzzStrictDecode: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5729550645592064 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: jsonFuzzStrictDecode Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000037e3e637 Crash State: NULL Sanitizer: address ASAN...

c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in ZSTD_createDDict_advanced

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5557894660751360 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

hermes:fuzzer-jsi-entry: Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

Project: https://github.com/facebook/hermes.git Detailed Report: https://oss-fuzz.com/testcase?key=5068829519773696 Project: hermes Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-jsi-entry Job Type: libfuzzerasanhermes Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in memvprintf

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4899181834797056 Project: haproxy Fuzzing Engine: afl Fuzz Target: fuzzcfgparser Job Type: aflasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000510 Cra...