apache-commons-jxpath:JXPathFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5918039399071744 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jackson-databind:ReadTreeFuzzer: Security exception in com.fasterxml.jackson.databind.node.ObjectNode.serialize

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5646019524427776 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ReadTreeFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception...

fastjson2:JsonFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5353652611317760 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hamcrest:HamcrestFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/hamcrest/JavaHamcrest.git Detailed Report: https://oss-fuzz.com/testcase?key=5153064552366080 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2022-1207 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53708 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster org.apache.commons.imaging.formats.jpeg.decoder.JpegDecoder.visitSOS...

h2database:SqlPreparedStatementFuzzer: Security exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=5203335802388480 Project: h2database Fuzzing Engine: libFuzzer Fuzz Target: SqlPreparedStatementFuzzer Job Type: libfuzzerasanh2database Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-imaging:ImagingJpegFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4885302936469504 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingJpegFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-1196 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53627 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.Module.canRead java.base/sun.invoke.util.VerifyAccess.isModuleAccessible...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6285611894177792 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-imaging:ImagingGifFuzzer: Security exception in java.base/java.io.ByteArrayOutputStream.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5867734521217024 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingGifFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-imaging:ImagingBmpFuzzer: Security exception in org.apache.commons.imaging.common.ImageBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5649300806041600 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingBmpFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Chinese APT Earth Preta runs spearphishing campaigns

Threat Level Actors Report For a detailed threat advisory, download the pdf file here Summary Earth Preta, an APT gang, staged a large-scale cyber espionage campaign in which the malware was transmitted via spear-phishing emails. The actors use various strategies to avoid detection and analysis,...

xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Detailed Report: https://oss-fuzz.com/testcase?key=5099852289933312 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.ctc.wstx.dtd.FullDTDReader.readContentSpec...

apache-commons-bcel:BcelFuzzer: Security exception in org.apache.bcel.classfile.ElementValue.readElementValue

Detailed Report: https://oss-fuzz.com/testcase?key=5127197608509440 Project: apache-commons-bcel Fuzzing Engine: libFuzzer Fuzz Target: BcelFuzzer Job Type: libfuzzerasanapache-commons-bcel Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2022-41940: Uncaught Exception

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io...

CVE-2022-41940

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io...

Uncaught exception in engine.io

Impact A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. events.js:292 throw er; // Unhandled 'error' event ^ Error: read ECONNRESET at TCP.onStreamRead internal/streambasecommons.js:209:20 Emitted 'error' event on Socket...

PT-2022-27281 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: The issue is related to an improper handling of exceptional conditions, which could allow a local attacker to...

Mozilla Firefox Trust Management Issue Vulnerability (CNVD-2023-15815)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozila Firefox is vulnerable to a trust management issue that could be exploited by an attacker to keep the connection active despite the removal of a security exception, making it appear that the certificate is...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Java$ArrayType.setEnclosingScope

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=6191950193885184 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...