unrar/unrar_fuzzer: Index-out-of-bounds in Unpack::LongLZ

Detailed report: https://oss-fuzz.com/testcase?key=4683334295748608 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerubsanunrar Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Unpack::LongLZ Unpack::Unpack15...

MS Sharepoint 2013 - Limited Access Permission Bypass

Document Title: =============== MS Sharepoint 2013 - Limited Access Permission Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2111 Release Date: ============= 2018-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 211...

Icyphoenix 2.2.0.105 SQL Injection Vulnerability

Exploit for php platform in category web applications Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities Product & Service Introduction: =============================== Icy Phoenix is a CMS based on phpBB engine a fully scalable and highly customisable...

knot-dns/fuzz_zscanner: Index-out-of-bounds in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4734243205808128 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerubsanknot-dns Platform Id: linux Crash Type: Index-out-of-bounds Crash...

gdal/cad_fuzzer: Heap-buffer-overflow in DWGFileRNUMBER::GetGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5723062755393536 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

SonicWall SonicOS NSA - Multiple Web Vulnerabilities

Document Title: =============== SonicWall SonicOS NSA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2018-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 1725...

Icyphoenix 2.2.0.105 SQL Injection

Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2006 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID:...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::EndMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6693392806313984 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

libreoffice/lwpfuzzer: Heap-buffer-overflow in LwpSilverBullet::IsLesserLevel

Detailed report: https://oss-fuzz.com/testcase?key=5741892999315456 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000003c4 Crash State:...

SonicWall SonicOS NSA - Bypass & Persistent Vulnerability

Document Title: =============== SonicWall SonicOS NSA - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1729 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5281...

dlplibs/key6fuzzer: Use-of-uninitialized-value in libetonyek::IWAParser::queryObject

Detailed report: https://oss-fuzz.com/testcase?key=5818720568999936 Project: dlplibs Fuzzer: libFuzzerdlplibskey6fuzzer Fuzz target binary: key6fuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libreoffice/pptxfuzzer: Heap-buffer-overflow in EVP_CipherInit_ex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6203225368690688 Project: libreoffice Fuzzer: libFuzzerlibreofficepptxfuzzer Fuzz target binary: pptxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::StartMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4617455260401664 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities

Document Title: =============== Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2055 Playlist: https://www.youtube.com/playlist?list=PL2hnNNM3yw-3svLm9UdSzvlVVZcx5DxV Videos:...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Crash in BigPtrArray::Index2Block

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5431178891886592 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

libreoffice/htmlfuzzer: Container-overflow in HTMLTableRow::GetCell

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6656273752784896 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overfl...

TP-Link TL-SG108E XSS / Weak Access Control

Overview ------------- Three vulnerabilities have been discovered in the TP-Link TL-SG108E, firmware 1.0.0 Build 20160722 Rel.50167: CVE-2017-17745 - Cross Site Scripting XSS in systemnameset.cgi, sysName parameter CVE-2017-17746 - Weak access control for user authentication CVE-2017-17747 - Weak...

libreoffice/fodsfuzzer: Heap-buffer-overflow in rtl_string_newFromStr

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5008090362544128 Project: libreoffice Fuzzer: libFuzzerlibreofficefodsfuzzer Fuzz target binary: fodsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

gdal/mitab_tab_fuzzer: Heap-buffer-overflow in TABINDNode::FindFirst

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4754517640871936 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...