Apache SkyWalking SQL Injection Vulnerability

Apache SkyWalking is an application performance monitor from the Apache Software USA Foundation primarily for environments such as microservices, cloud-native and container-based. An SQL injection vulnerability exists in the H2/MySQL/TiDB storage implementation in Apache SkyWalking versions 6.0.0...

tidb:fuzzNewBitLiteral: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5109950732042240 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzNewBitLiteral Job Type: libfuzzerasantidb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000335cce0 Crash State: NULL Sanitizer: address ASAN Recommended...

Denial Of Service (DoS)

tidb is vulnerable to denial of service. The vulnerability exists in tidbResultSet function in drivertidb.go because it fails to perform garbage collection until next execution which allow to attack to leading to an application crash...

Self Hosted Git Service: Gogs

Gogs is a self-hosted Git service written in Go which is very easy to get running and has low system usage as well. It aspires to be the easiest, fastest, and most painless way to set up a self-hosted Git service. With Go, this can be done with an independent binary distribution across ALL...