fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_utils_time_to_seconds

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087208312406016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Ultimate Project Manager CRM PRO 2.05 SQL Injection

Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage Date: 2020-16-09 Exploit Author: nag0mez Vendor Homepage: https://ultimatepro.codexcube.com/ Version: = 2.0.5 Tested on: Kali Linux 2020.2 The SQLi injection does not allow UNION payloads. However, we can guess...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5727693351682048 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000024000 Crash State: grk::Subband::Subband...

mruby:mruby_fuzzer: Crash in presym_sym2name

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5354991105343488 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002800c734e Crash State:...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Crash in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6236530802425856 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619000013cc0...

suricata:fuzz_siginit: Use-of-uninitialized-value in pcre_compile2

Detailed Report: https://oss-fuzz.com/testcase?key=5371981735919616 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcrecompile2 DetectPcreParse DetectPcreSet...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash State: wolfCryptcustomfree wolfSSLFree GetDhPublicK...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5706757122555904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1ht::T1HT::postDecode...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::FileParserUtils::finishMolProcessing

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5182941669621760 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::rev_fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4862900302512128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900510e1fc Crash State: ojph::local::revfetch...

libreoffice:sftfuzzer: Stack-buffer-overflow in ParseCMAP

Detailed Report: https://oss-fuzz.com/testcase?key=4859879712620544 Project: libreoffice Fuzzing Engine: afl Fuzz Target: sftfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc551c0ae0 Crash State: ParseCMAP...

qcms:fuzz: Heap-buffer-overflow in qcms::chain::qcms_modular_transform_create_lut::h1a73851109fbc700

Detailed Report: https://oss-fuzz.com/testcase?key=5081913385287680 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6020000000b8 Crash State:...

suricata:fuzz_siginit: Use-of-uninitialized-value in DetectDatarepParse

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5762961148477440 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Announcing the Fuzzilli Research Grant Program

Posted by Samuel Groß, Project Zero Project Zero’s mission is to make 0-day hard in order to improve end-user security. We attack this problem in different ways, including supporting other security researchers. While Google currently offers research grants, they are limited to academics and those...

arrow:parquet-arrow-fuzz: Negative-size-param in CopyUncompressedBlockToOutput

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4914963406389248 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: parquet-arrow-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadata

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5076612654301184 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x607000000460 Crash...

libzmq:socket_connect_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=4686903000170496 Project: libzmq Fuzzing Engine: afl Fuzz Target: socketconnectfuzzer Job Type: aflasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x625000013900...

OPENSUSE-SU-2020:1564-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 - Fixed various issues discovered by fuzzing: - Made handling of XDGRUNTIMEDIR more secure bsc1172515: This update was imported from the SUSE:SLE-15-SP2:Update update proje...

Security update for libqt5-qtbase (important)

openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2020:1564-1 Rating: important References: 1172515 1176315 Cross-References: CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...

arrow:parquet-arrow-fuzz: Negative-size-param in parquet::SerializedPageReader::DecompressPage

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5657332229603328 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...