libheif:file-fuzzer: Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5648321160151040 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5649586724274176 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::Packet::createFirstLayer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5718336936869888 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Cloud Transformation and the Shared Security Model

For many organizations, the lure of the cloud is very strong. Large enterprises usually have several justifications for adopting cloud-based services including preserving capital, adding scalability to applications, and minimizing IT staffing needs. Small- to medium-sized organizations often look...

LANCOM WLAN Controller - (Login) XSS Proof of Concept

Document Title: =============== LANCOM WLAN Controller - Login XSS Proof of Concept References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2255 Video: https://www.youtube.com/watch?v=55jpvxtBsUE Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2196 Release Date:...

openvswitch:odp_target: Use-of-uninitialized-value in tun_key_to_attr

Detailed Report: https://oss-fuzz.com/testcase?key=5715581933453312 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tunkeytoattr odpflowkeyfromflow...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_strnstr

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5681891455008768 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002b8 Crash State...

imagemagick:encoder_ept2_fuzzer: Heap-buffer-overflow in PushQuantumFloat24Pixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5730554189447168 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

ghostscript:gstoraster_fuzzer: Crash in mem_mapped4_fill_rectangle

Detailed Report: https://oss-fuzz.com/testcase?key=5702235993669632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000526dcdc Crash State: memmapped4fillrectangle...

Qik Chat v3.0 iOS - (Name) Command Inject Vulnerability

Document Title: =============== Qik Chat v3.0 iOS - Name Command Inject Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2247 Release Date: ============= 2020-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 224...

oniguruma:fuzzer: Heap-buffer-overflow in mbc_case_fold

Detailed Report: https://oss-fuzz.com/testcase?key=5717131275796480 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanoniguruma Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000f4 Crash State: mbccasefold stringcmpic match...

skia:api_mock_gpu_canvas: Use-of-uninitialized-value in GrShape::simplifyRect

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5162098826149888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

imagemagick:encoder_tiff64_fuzzer: Heap-buffer-overflow in PushLongPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5737439391121408 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

clamav:clamav_scanfile_fuzzer: Heap-buffer-overflow in cli_codepage_to_utf8

Detailed Report: https://oss-fuzz.com/testcase?key=5732268351160320 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfilefuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900000cc9a Crash State: clicodepagetoutf8...

libavif:avif_decode_fuzzer: Heap-buffer-overflow in dav1dFeedData

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5631949457850368 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

dlplibs:wdbfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5720192547291136 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffde3842118 Crash State: WPSEmbeddedObject::operator=...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5673234361221120 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000006e28 Crash State: void...

POS PHP v17.5 - (Employees) Persistent Web Vulnerability

Document Title: =============== POS PHP v17.5 - Employees Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2230 Release Date: ============= 2020-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 22...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5699424467812352 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

File Sharing And Chat 1.0 Denial Of Service

Document Title: =============== File Sharing & Chat v1.0 iOS - Denial of Service Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2222 Release Date: ============= 2020-04-27 Vulnerability Laboratory ID VL-ID:...