graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in AllocateString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5929937486741504 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

libaom/av1_dec_fuzzer_threaded: Use-of-uninitialized-value in call_setjmp

Detailed report: https://oss-fuzz.com/testcase?key=5142120494006272 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: callsetjmp...

Shopify - Persistent XML Cross Site Scripting Vulnerability

Document Title: =============== Shopify - Persistent XML Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1983 Video: https://www.youtube.com/watch?v=LDiXveqQ0gg Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID:...

Barracuda Cloud Control 3.020 Cross Site Scripting

Document Title: =============== Barracuda Cloud Control v3.020 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=662 Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID: ===================================...

Adobe Systems - Arbitrary Code Injection Vulnerability

Document Title: =============== Adobe Systems - Arbitrary Code Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2120 PSIRT ID: 7873 Vulnerability Magazine:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed report: https://oss-fuzz.com/testcase?key=6276744838381568 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability

Document Title: =============== Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...

openvswitch/ofp_print_fuzzer: Heap-buffer-overflow in parse_intel_port_custom_property

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5072291707748352 Project: openvswitch Fuzzer: aflopenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

gdal/mrf_fuzzer: Heap-buffer-overflow in GDAL_LercNS::Lerc2::ComputeChecksumFletcher32

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5450985903226880 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000761 Crash...

Barracuda Cloud Control 7.1.1.003 - XSS Web Vulnerability

Document Title: =============== Barracuda Cloud Control 7.1.1.003 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-16 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Windows .library-ms Information Disclosure

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.LIBRARY-MS-FILETYPE-INFORMATION-DISCLOSURE.txt + ISR: Apparition Security Greetz: indoushka|Eduardo Vendor ================ www.microsoft.com File format...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5664576019365888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

freetype2/truetype: Heap-buffer-overflow in tt_set_mm_blend

Detailed report: https://oss-fuzz.com/testcase?key=6380894154653696 Project: freetype2 Fuzzer: libFuzzerfreetype2truetype Fuzz target binary: truetype Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60a000020e38 Crash State: ttsetmmblen...

freetype2/cff: Heap-buffer-overflow in cff_get_cid_from_glyph_index

Detailed report: https://oss-fuzz.com/testcase?key=5731147760795648 Project: freetype2 Fuzzer: libFuzzerfreetype2cff Fuzz target binary: cff Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60300000089a Crash State: cffgetcidfromglyphind...

libgit2/download_refs_fuzzer: Heap-buffer-overflow in ng_pkt

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5105997956775936 Project: libgit2 Fuzzer: afllibgit2downloadrefsfuzzer Fuzz target binary: downloadrefsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

ThreatList: Bug Bounty Payouts Increase Six Percent for Critical Vulnerabilities

The average payout price for critical vulnerabilities are up six percent and now average $2,041 compared to the prior year. The numbers are from HackerOne’s 2018 Hacker-Powered Security Report, published Wednesday. The study looked at data derived from the HackerOne community between May 2017 and...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=6320707435757568 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Barracuda ADC 5.x Cross Site Scripting

Document Title: =============== Barracuda ADC v5.x - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1424 Release Date: ============= 2018-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Windows WordPad Privilege Chaining Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to the fact that...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::pipeRunAAXBGR8

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5751988351401984 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...