wget2: Heap-buffer-overflow in getContent

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5103826937839616 Project: wget2 Fuzzer: aflwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: aflasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Ampache 3.8.2 Cross Site Scripting

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AMPACHE-v3.8.2-XSS.txt + ISR: ApparitionSec Vendor: ========== ampache.org Product: ============== ampache v3.8.2 A web based audio/video streaming application and file...

gnutls: Use-of-uninitialized-value in _wrap_nettle_pk_verify

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4994565519966208 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

Perch v3.0.3 CMS - Multiple Web Vulnerabilities

Document Title: =============== Perch v3.0.3 CMS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2067 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15948 CVE-ID: ======= CVE-2017-15948 Release Date: ============...

gdal: Heap-buffer-overflow in ReadBITDOUBLE

Detailed report: https://oss-fuzz.com/testcase?key=4985169473699840 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60d000000677 Crash State: ReadBITDOUBLE...

pcre2: Heap-buffer-overflow in internal_dfa_match

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=4538978877308928 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in Read2B

Detailed report: https://oss-fuzz.com/testcase?key=4979475152371712 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000019d Crash State: Read2B ReadBITSHORT Skip...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4535496598355968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

grpc: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Detailed report: https://oss-fuzz.com/testcase?key=4857057310146560 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gdal: Heap-buffer-overflow in Read2B

Detailed report: https://oss-fuzz.com/testcase?key=6406166785556480 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000344 Crash State: Read2B SkipBITDOUBLE...

Sophos Cyberoam - Cross-site scripting

Exploit Title: Sophos Cyberoam – Cross-site scripting XSS vulnerability Date: 25/05/2017 Exploit Author: Bhadresh Patel Version: = Firmware Version 10.6.4 CVE : CVE-2016-9834 This is an article with video tutorial for Sophos Cyberoam – Cross-site scripting XSS vulnerability...

gdal: Index-out-of-bounds in OGRNTFDataSource::GetGClass

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5496872548433920 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg: Index-out-of-bounds in output_data

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6574546079449088 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMLPfuzzer Fuzz target binary: ffmpegAVCODECIDMLPfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

gdal: Index-out-of-bounds in NTFCodeList::NTFCodeList

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5859332488953856 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gdal: Heap-buffer-overflow in NTFFileReader::Open

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4776382523506688 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting Vulnerability

WordPress Newsletter Supsystic plugin version 1.1.7 suffers from a cross site scripting vulnerability. Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Product ...

Wordpress Contentive Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Contentive Theme - Cross Site Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2065 Release Date: ============= 2017-05-23 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress Newsletter Supsystic 1.1.7 Cross Site Scripting

Document Title: =============== Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2070 Release Date: ============= 2017-05-16 Vulnerability Laboratory ID VL-ID:...

Simple ASC CMS 1.2 Cross Site Scripting

Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 Release Date: ============= 2017-05-21 Vulnerability Laboratory ID VL-ID: ====================================...

gdal: Index-out-of-bounds in DGNProcessElement

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5673081030836224 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...