Apple Mac OS X - Feedback Assistant Race Condition (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Feedback Assistant Race Condition', 'Description' = %q This module exploits a race condition vulnerability in Mac's Feedback Assistant. ...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in GTiffRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764371029950464 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Mac OS X Feedback Assistant Race Condition Exploit

This Metasploit module exploits a race condition vulnerability in Mac's Feedback Assistant. A successful attempt would result in remote code execution under the context of root. This module requires Metasploit: https://metasploit.com/download Current source:...

Mac OS X Feedback Assistant Race Condition

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Feedback Assistant Race Condition', 'Description' = %q This module exploits a race condition vulnerability in Mac's Feedback Assistant. ...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5768121945686016 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

Slow performance for a single tenant database backup of the SAP HANA system

Challenge When backing up a small 128 GB tenant/system DB of SAP HANA, the backup performance might be comparatively slower than a file based backup or using a different backup solution. Cause After several customers pointed out the performance degradation - compared to file based backups - the...

karchive/karchive_fuzzer: Heap-buffer-overflow in KAr::openArchive

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5721807937601536 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

[SECURITY] Fedora 28 Update: mod_cluster-1.3.11-1.fc28

Modcluster is an httpd-based load balancer. Like modjk and modproxy, modcluster uses a communication channel to forward requests from httpd to one of a set of application server nodes. Unlike modjk and modproxy, modclus ter leverages an additional connection between the application server nodes a...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::endsWith

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5699436728025088 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

PrinterLogic Print Management Software Vulnerabilities

The CERT Coordination Center CERT/CC has released information on vulnerabilities affecting PrinterLogic Print Management Software. A remote attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages user...

skia/sksl2spirv: Use-of-uninitialized-value in std::__1::__constrain_hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680592508682240 Project: skia Fuzzer: libFuzzerskiasksl2spirv Fuzz target binary: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

wget2/libwget_iri_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5641953338720256 Project: wget2 Fuzzer: libFuzzerwget2libwgetirifuzzer Fuzz target binary: libwgetirifuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

llvm/llvm-microsoft-demangle-fuzzer: Heap-buffer-overflow in llvm::ms_demangle::Node** llvm::ms_demangle::ArenaAllocator::allocArray<llvm::ms

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5105728374702080 Project: llvm Fuzzer: libFuzzerllvmllvm-microsoft-demangle-fuzzer Fuzz target binary: llvm-microsoft-demangle-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

Mac OS X Feedback Assistant Race Condition

This module exploits a race condition vulnerability in Mac's Feedback Assistant. A successful attempt would result in remote code execution under the context of root. Module Options msf use exploit/osx/local/feedback/assistantroot msf undefinedassistantroot show actions ...actions... msf...

lwan/request_fuzzer: Global-buffer-overflow in parse_headers

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5673683021987840 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000012320ff...

libreoffice/slkfuzzer: Global-buffer-overflow in ScAttrArray::GetDoc

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5673715972440064 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

kimageformats/kimgio_fuzzer: Negative-size-param in QImage::fill

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5118681342803968 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Crash...

Supply Chain Integrity Month

April is Supply Chain Integrity Month. The Cybersecurity and Infrastructure Security Agency CISA, the Office of the Director of National Intelligence ODNI, and the Department of Defense DOD are partnering to promote the importance of supply chain security and risk management. Breaches in the supp...

Jfinal cms xss vulnerability at frontend feedback

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...