unrar/unrar_fuzzer: Use-of-uninitialized-value in QuickOpen::Read

Detailed report: https://oss-fuzz.com/testcase?key=5101043319832576 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QuickOpen::Read Archive::Read...

wireshark/fuzzshark_ip: Heap-buffer-overflow in process_netbios_name

Detailed report: https://oss-fuzz.com/testcase?key=6263911520141312 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000007d7f Crash State:...

katholisch-backnang.de XSS vulnerability

Vulnerable URL: https://katholisch-backnang.de/popup/email.php?emailname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4994323 VIP website status:| No Coordinated...

eu.abinbevcareers.com XSS vulnerability

Open Bug Bounty ID: OBB-441706 Description| Value ---|--- Affected Website:| eu.abinbevcareers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gdal/gdal_fuzzer: Heap-buffer-overflow in GRIB2Inventory2to7

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5093138466078720 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

dlplibs/bmifuzzer: Use-of-uninitialized-value in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<unsi

Detailed report: https://oss-fuzz.com/testcase?key=5836862116593664 Project: dlplibs Fuzzer: libFuzzerdlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::treenodebase&...

elsfrigge.nl XSS vulnerability

Vulnerable URL: http://elsfrigge.nl/cgi-bin/v14/view.pl?db=%E2%80%9C/%3E%E2%80%99%3E/%3E%3E%22%3E%3Cimg%20src=1%20onerror=promptdocument.domain;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

gutscheinpony.de XSS vulnerability

Vulnerable URL: https://www.gutscheinpony.de/suche?search=%22%27--%21%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm%281%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.12.2017 Latest check for patch:| 25.12.2017 14:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

fhw.gr XSS vulnerability

Open Bug Bounty ID: OBB-428852 Description| Value ---|--- Affected Website:| fhw.gr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

unrar/unrar_fuzzer: Use-of-uninitialized-value in wcsncatz

Detailed report: https://oss-fuzz.com/testcase?key=5673561487310848 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: wcsncatz Archive::ProcessExtra50...

planetahuerto.fr XSS vulnerability

Vulnerable URL: https://www.planetahuerto.fr/articles-rechercher/%22%3E%3Cimg%20src=%22x%22%20onerror=prompt%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 945280 VIP website status:| No...

stdlib.com XSS vulnerability

Vulnerable URL: https://stdlib.com/search/?type=="autofocus/onfocus="alert/OPENBUGBOUNTY/" Details: Description| Value ---|--- Patched:| Yes, at 20.11.2017 Latest check for patch:| 20.11.2017 12:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 339155 VIP websi...

study-in.de XSS vulnerability

Vulnerable URL: https://www.study-in.de/de/kontakt/kontaktformular/ Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100915 VIP website status:| No...

pakhcnewdelhi.org.pk XSS vulnerability

Vulnerable URL: http://pakhcnewdelhi.org.pk/page.php?data=%22%3E%3CimG/sRc=l%20oNerrOr=prompt/OPENBUGBOUNTY/%20x%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1333997 VIP website status:| No Coordinated...

open62541/fuzz_binary_message: Heap-buffer-overflow in Operation_addNode_finish

Detailed report: https://oss-fuzz.com/testcase?key=4952054897311744 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f000000690 Crash...

cbac.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-407907 Description| Value ---|--- Affected Website:| cbac.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lammersmachinery.eu XSS vulnerability

Vulnerable URL:...

apothema.gr XSS vulnerability

Vulnerable URL: http://www.apothema.gr/?q="=blabla Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 142475 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitte...

yara/rules_fuzzer: Use-of-uninitialized-value in hex_yylex

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5637751744495616 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

Mako Server 2.5 Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mako Server v2.5 OS Command Injection RCE', 'Description' = %q This module exploits a vulnerability found in Mako Server v2.5. It's possible to...