7407 matches found
icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext
Detailed report: https://oss-fuzz.com/testcase?key=5693360544677888 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f8c94ee4a30 Crash State:...
imagemagick/encoder_pdf_fuzzer: Use-of-uninitialized-value in ReadPDFInfo
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5629534981849088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdffuzzer Fuzz target binary: encoderpdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
ffmpeg/ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in read_sb_block
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5658343542095872 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Cra...
imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5743506502451200 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...
icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext
Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5649936613376000 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in decode_slice
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5710295743332352 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
Ann Day honey network capture“use of the ElasticSearch Groovy vulnerability Monroe coin(Dog)mining”event analysis-vulnerability warning-the black bar safety net
1, Overview 2019 6 May 13, Ann Day honey network capture to use CVE-2015-1427ElasticSearch Groovyremote command execution vulnerability attacks. The vulnerability principle is Elaticsearch groovy as a scripting language, and based on the use of black and white lists of the sandbox mechanism to...
imagemagick/ping_dng_fuzzer: Crash in LibRaw::recycle
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5673227122114560 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN...
imagemagick/encoder_j2k_fuzzer: Heap-buffer-overflow in ReadJP2Image
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5634686653562880 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderj2kfuzzer Fuzz target binary: encoderj2kfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...
hostap/x509: Heap-buffer-overflow in x509_parse_ext_basic_constraints
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737817893765120 Project: hostap Fuzzer: libFuzzerhostapx509 Fuzz target binary: x509 Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6140000003dd...
openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::Message::Write
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5734126906245120 Project: openthread Fuzzer: aflopenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...
libfdk-aac/aacDecoder_DecodeFrame: Index-out-of-bounds in processDrcTime
Detailed report: https://oss-fuzz.com/testcase?key=5744919487971328 Project: libfdk-aac Fuzzer: libFuzzerlibfdk-aacaacDecoderDecodeFrame Fuzz target binary: aacDecoderDecodeFrame Job Type: libfuzzerubsanlibfdk-aac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
TP-Link Wi-Fi extender remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
WiFi extender can enlarge the WiFi signal, mainly used for large or multi-storey residential, and the router signal can not cover the family's case. The extender's principle is from the main router to get a WiFi signal, and broadcast channel other WiFi signal weak or no signal area. IBM X-Force...
imagemagick/ping_icon_fuzzer: Use-of-uninitialized-value in png_crc_finish
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5751794220662784 Project: imagemagick Fuzzer: libFuzzerimagemagickpingiconfuzzer Fuzz target binary: pingiconfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
c-ares/ares_parse_reply_fuzzer: Heap-buffer-overflow in ares_parse_aaaa_reply
Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5650695891451904 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerasanc-ares Platform Id: linux Crash Type: Heap-buffer-overflow...
Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks
Important Update 21 June 2019— Mozilla on Thursday released another update Firefox version 67.0.4 to patch a second zero-day vulnerability. If you use the Firefox web browser, you need to update it right now. Mozilla earlier today released Firefox 67.0.3 and Firefox ESR 60.7.1 versions to patch a...
Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks
Important Update 21 June 2019—Mozilla on Thursday released another update Firefox version 67.0.4 to patch a second zero-day vulnerability. If you use the Firefox web browser, you need to update it right now. Mozilla earlier today released Firefox 67.0.3 and Firefox ESR 60.7.1 versions to patch a...
WordPress Count per Day Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Count per Day plugin is a plugin that counts the number of visitors to a web page. A cross-site scripting vulnerability exists in...
WebLogic Server re-aeration at high risk 0 day vulnerability-a vulnerability warning-the black bar safety net
6 May 11, Ali cloud security team found WebLogic CVE-2019-2725 patch to bypass the 0day vulnerabilities, and First Time reported in Oracle official, 6 January 12, get Oracle official confirmation. Since Oracle has not yet released an official patch, vulnerability details and real PoC are not...
