3372 matches found
CVE-2020-37104 ASTPP 4.0.1 VoIP Billing - Database Backup Download
ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database...
CVE-2020-37104
CVE-2020-37104 affects ASTPP 4.0.1 and describes an information disclosure where unauthenticated attackers can download database backup files by predicting 6‑digit PINs and fuzzing the backup download URL under /database_backup/. The vulnerability relates to information exposure of sensitive data...
Exploit for Path Traversal in Apache Http_Server
🔥 LFI-Destroyer – Authorized Penetration Testing Framework LFI-D...
CVE-2020-37104: Insertion of Sensitive Information into Externally-Accessible File or Directory
ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database...
PT-2026-7668
ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database...
OSV-2026-216 Heap-buffer-overflow in mg_mqtt_next_prop
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482698892 Crash type: Heap-buffer-overflow READ 1 Crash state: mgmqttnextprop fuzz.c...
OpenSSL 3.x Malicious AES‑GCM ASN.1 Parameter Injection
This C code is a security research proof of concept targeting OpenSSL's CMS Cryptographic Message Syntax handling. It programmatically creates a syntactically valid CMS AuthEnvelopedData object using AES-256-GCM, then injects a custom-crafted ASN.1 AESGCMPARAMETERS sequence with an abnormally lar...
SAFuzz: Semantic-Guided Adaptive Fuzzing for LLM-Generated Code
While AI-coding assistants accelerate software development, current testing frameworks struggle to keep pace with the resulting volume of AI-generated code. Traditional fuzzing techniques often allocate resources uniformly and lack semantic awareness of algorithmic vulnerability patterns, leading...
Following Dragons: Code Review-Guided Fuzzing
Modern fuzzers scale to large, real-world software but often fail to exercise the program states developers consider most fragile or security-critical. Such states are typically deep in the execution space, gated by preconditions, or overshadowed by lower-value paths that consume limited fuzzing...
open62541:fuzz_pubsub_binary: Use-of-uninitialized-value in UA_NetworkMessage_decodePayload
Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6747482494402560 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzpubsubbinary Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
OSV-2026-212 UNKNOWN READ in gpsd_poll
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482617785 Crash type: UNKNOWN READ Crash state: gpsdpoll FuzzDriversStructured.c...
DyMA-Fuzz: Dynamic Direct Memory Access Abstraction for Re-Hosted Monolithic Firmware Fuzzing
The rise of smart devices in critical domains--including automotive, medical, industrial--demands robust firmware testing. Fuzzing firmware in re-hosted environments is a promising method for automated testing at scale, but remains difficult due to the tight coupling of code with a...
fuzzing-portfolio-project
Fuzzing Portfolio Project: Heap Overflow Discovery Author:...
gpsd:FuzzDriversStructured: Crash in gpsd_poll
Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5794326172205056 Project: gpsd Fuzzing Engine: afl Fuzz Target: FuzzDriversStructured Job Type: aflasangpsd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x56000000fc00 Crash State: gpsdpoll...
matio:matio_fuzzer: Stack-buffer-overflow in H5T__bit_copy
Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5609582314717184 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...
OSV-2026-205 UNKNOWN READ in gpsd_poll
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481932457 Crash type: UNKNOWN READ Crash state: gpsdpoll FuzzDrivers.c...
threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
Detailed Report: https://oss-fuzz.com/testcase?key=5967345305845760 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
OSV-2026-196 Null-dereference READ in ubsan_GetStackTrace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481752521 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...
libical:libicalvcard_fuzzer: Use-of-uninitialized-value in vcardstructured_free
Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=5806021099716608 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalvcardfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...