keystone:fuzz_asm_x86_16: Heap-use-after-free in llvm_ks::X86Operand::getToken

Detailed Report: https://oss-fuzz.com/testcase?key=5637154293415936 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmx8616 Job Type: aflasankeystone Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60d000000a28 Crash State: llvmks::X86Operand::getToken...

The zero-day exploits of Operation WizardOpium

Back in October 2019 we detected a classic watering-hole attack on a North Korea-related news site that exploited a chain of Google Chrome and Microsoft Windows zero-days. While we've already published blog posts briefly describing this operation available here and here, in this blog post we'd li...

libspng:spng_read_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5105724534554624 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzermsanlibspng Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

New iOS Jailbreak Tool Works on iPhone Models iOS 11 to iOS 13.5

A hacker team has released a new method to jailbreak iPhones that they claim uses a zero-day exploit that allows them to jailbreak iPhones running iOS 11 through Apple’s most recent version of its mobile operating system – iOS 13.5. Calling it a “big milestone for jailbreaking,” one of its...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-use-after-free in RDKit::SubstanceGroup::addAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5649396342718464 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607000002274...

keystone:fuzz_asm_arm_arm: Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

Detailed Report: https://oss-fuzz.com/testcase?key=5659471866232832 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmarmarm Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvmks::MCAssembler::computeFragmentSize...

New Tool Can Jailbreak Any iPhone and iPad Using An Unpatched 0-Day Bug

The hacking team behind the "unc0ver" jailbreaking tool has released a new version of the software that can unlock every single iPhone, including those running the latest iOS 13.5 version. Calling it the first zero-day jailbreak to be released since iOS 8, unc0ver's lead developer Pwn20wnd said...

New Tool Can Jailbreak Any iPhone and iPad Using An Unpatched 0-Day Bug

The hacking team behind the "unc0ver" jailbreaking tool has released a new version of the software that can unlock every single iPhone, including those running the latest iOS 13.5 version. Calling it the first zero-day jailbreak to be released since iOS 8, unc0ver's lead developer Pwn20wnd said...

tremor:decode_fuzzer: Heap-buffer-overflow in res2_inverse

Detailed Report: https://oss-fuzz.com/testcase?key=5769585533124608 Project: tremor Fuzzing Engine: afl Fuzz Target: decodefuzzer Job Type: aflasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60e00000062d Crash State: res2inverse mapping0inverse...

wabt:wasm2wat_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5680885787787264 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasanwabt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Zero-day attacks are potent cyber threats that require serious response

By Waqas Lately, Zero-day attacks are being exploited to target small as well as large businesses. This is a post from HackRead.com Read the original post: Zero-day attacks are potent cyber threats that require serious response...

rdkit:smiles_string_to_mol_fuzzer: Container-overflow in yysmiles_parse

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5760260085383168 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

open62541:fuzz_mdns_xht: Use-of-uninitialized-value in txt2sd

Detailed Report: https://oss-fuzz.com/testcase?key=5657499161329664 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: txt2sd fuzzmdnsxht.cc txt2sd Sanitizer:...

imagemagick:encoder_pgx_fuzzer: Heap-buffer-overflow in PushLongPixel

Detailed Report: https://oss-fuzz.com/testcase?key=5646203397341184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpgxfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000003b35 Crash State: PushLongPixel...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=5736051093274624 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffd87930840 Crash State: libcppstrchr...

Kicking off Developer Day 2020

Developer Day 2020 kicks off today with seven on-demand sessions for more than 2,600 registrants. This is the first time Developer Day has been held in a virtual setting and the VMware Carbon Black team is excited to welcome the largest group of developers we have ever had in attendance. With eig...

Wordpress ripro day theme has file upload vulnerability

The ripro Day Theme is a WordPress theme for the pay for resources genre. Wordpress ripro day theme has a file upload vulnerability that can be exploited by remote attackers to extract power and obtain data illegally...

comune.aviglianoumbro.tr.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155739 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5673234361221120 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000006e28 Crash State: void...

libzmq:socket_bind_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5669751377625088 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: socketbindfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...