firestore:serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5650431242141696 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000187eef Crash State: pbreleasesinglefield pbrelease...

firestore:serializer_fuzzer: Crash in allocate_field

Detailed Report: https://oss-fuzz.com/testcase?key=5142301747970048 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerubsanfirestore Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffffd Crash State: allocatefield pbdecbytes...

MobiSystems Ltd.: Firebase Firestore insecure database

Summary: The app is exposing a firebase database url that has no read/write protections. Steps To Reproduce: 1. Decompile the Android app 2. Do a string search for firebasedatabase 3. Use the project name i.e. msdict-dev in combination with the Firestore REST API to modify the database. Supportin...

Mac-Focused Malvertising Campaign Abuses Google Firebase DBs

A malvertising group named VeryMal that targets Mac users has changed up its tactics, ditching steganography as its obfuscation technique. Instead, it’s using ad tags that fetch a payload from Google Firebase in order to redirect users to malicious pop-ups. Confiant estimates that close to 1...