matio:matio_fuzzer: Crash in H5O_sdspace_shared_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5675535468593152 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000126c8 Crash State: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteraterea...

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in parse_band_ext

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5709394985091072 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_amazon_video

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5112748036063232 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a00003d491 Crash State...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in bytestring_to_str

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5728342863249408 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2019-17057

Footy Tipping Software AFL Web Edition 2019 allows XSS...

CVE-2019-17057

Footy Tipping Software AFL Web Edition 2019 allows XSS...

Cross site scripting

Footy Tipping Software AFL Web Edition 2019 allows XSS...

CVE-2019-17058

Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administrator who uploads a crafted upload.dat file...

CVE-2019-17058

Footy Tipping Software AFL Web Edition 2019 contains a vulnerability where an Administrator can bypass a whitelist and upload a crafted upload.dat file, enabling arbitrary file upload and remote code execution. The issue affects the web edition of the Footy Tipping Software AFL 2019; exploitation...

CVE-2019-17057

Footy Tipping Software AFL Web Edition 2019 allows XSS...

CVE-2019-17057

Footy Tipping Software AFL Web Edition 2019 is affected by a Cross‑Site Scripting (XSS) vulnerability. Multiple sources (CNVD-2019-42565, NVD CVE-2019-17057) describe a web edition vulnerability in 2019 that enables attacker‑supplied input to trigger client‑side code execution. CNVD explicitly st...

yara:rules_fuzzer: Heap-double-free in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5123250044796928 Project: yara Fuzzing Engine: afl Fuzz Target: rulesfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6120012ffd00 Crash State: yarayypar...

libheif:file-fuzzer: Heap-use-after-free in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5649801827319808 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x613000010a7d Crash State: void applysaointernal void applysao...

wireshark:fuzzshark_ip: Global-buffer-overflow in dissect_snmp_PDUs

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5694793825124352 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in SHA1Update

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5752041897197568 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000183c74 Crash State:...

binutils:fuzz_disassemble: Global-buffer-overflow in disassemble

Detailed Report: https://oss-fuzz.com/testcase?key=5663479772217344 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001dbdff8 Crash State: disassemble printinsnv850...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5749038406434816 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6290000d16e0...

lwan:config_fuzzer: Global-buffer-overflow in lwan_strbuf_append_str

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5640887438147584 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x00000114d3e0 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_WMAV2_fuzzer: Heap-use-after-free in get_bits1

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5675574936207360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWMAV2fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61900017ae0...

libxslt:xpath: Heap-buffer-overflow in xmlXPathCompileExpr

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5638886922911744 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7fd03ca4f7c8 Crash...