CVE-2025-34314

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the SRC, DST, and COMMENT parameters when creating a time constraint rule. When a user adds a time constraint rul...

selinux:binpolicy-fuzzer: Heap-buffer-overflow in strs_create_and_add

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5843327859621888 Project: selinux Fuzzing Engine: afl Fuzz Target: binpolicy-fuzzer Job Type: aflasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...