envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeConnectionBase::close

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5658665360031744 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 1...

envoy/server_fuzz_test: Stack-buffer-overflow in grpc_parse_ipv6_hostport

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5759581388013568 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeConnectionBase::close

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5154365005365248 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 1...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::Thread::LockGuard::LockGuard

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=4580196261822464 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::FakeRawConnection

Detailed report: https://oss-fuzz.com/testcase?key=6215556767154176 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6120000fdf68 Crash State:...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::write

Detailed report: https://oss-fuzz.com/testcase?key=5390121967812608 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x612000060160 Crash State:...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::write

Detailed report: https://oss-fuzz.com/testcase?key=5631359409192960 Project: envoy Fuzzer: aflenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6170000de020 Crash State:...

envoy/server_fuzz_test: Heap-use-after-free in Envoy::Upstream::SubsetLoadBalancer::updateFallbackSubset

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5705154446753792 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

Memory Corruption Vulnerability in Lovecraft Universal Player

Aiki Universal Player is a local video software that can play image files and supports almost all major video formats. A memory corruption vulnerability exists in Lovecraft Universal Player when parsing the special envoy mp2 file format, which can be exploited by attackers to cause a denial of...

Memory Corruption Vulnerability in Lovecraft Universal Player (CNVD-2017-35554)

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. A memory corruption vulnerability exists in Aiki Universal Player when parsing the special envoy mkv file format, which can be exploited by attackers to cause a...

Envoy: Abuse of API can Lead to DoS

Issue Description The researcher identified that it is possible to abuse the manual creation of employees via the api, meaning that a malicious attacker can create a trial account and use this to mass spam users' with emails, the screenshot below shows the mass amount of emails that can be sent i...

Royal Envoy - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Royal Envoy published at the 'play' market has multiple vulnerabilities...

Envoy: Stored XSS

Hello Security Team, I Have Found A Stored XSS Vulnerability in iPad Settings Page .. So .. Here Is How To Reproduce The Vulnerability: 1. Login To Your Account In Envoy 2. Change Your Company Name From Settings Page .. And Set It To Your Payload Like . Or You Can Create A New Account With This...

Envoy: [dashboard.signwithenvoy.com] Open Redirect

Open redirect via Request-URI PoC: https://dashboard.signwithenvoy.com//www.google.com/%2e%2e%2f HTTP Response: HTTP/1.1 303 See Other ... Location: //www.google.com/%2e%2e%2f/...

Envoy: Delete visitor from IPAD with fullname which contains JS results XSS

Hi, Update visitor from IPAD with fullname of alert1 and save. IGNORE THE POP UP, IT HAS BEEN REPORTED ALREADY Delete this user, XSS will pop up, the fullname is now stored XSS. Any visitor which using the IPAD application can create stored XSS which will be activate once you clicked on the delet...

Envoy: Stored XSS on adding locations

Authenticate into the application. 2. Navigate to https://signwithenvoy.com/locations 3. Click on "Add a new location" 4. Enter ";alert1" for Location Name. 5. Enter some random Location Admin's name, Location admin's email and password. 6. Click on "Add Location" 7. Notice that a pop-up appears...