matio:matio_fuzzer: Heap-buffer-overflow in H5O_attr_shared_decode

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5690540230443008 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000c60 Crash State:...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Four security issues were fixed, including: 1021723 Various fixes from internal audits, fuzzing and other initiatives...

ndpi:fuzz_process_packet: Heap-buffer-overflow in SHA1Update

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5752041897197568 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000183c74 Crash State:...

openSUSE Security Update : chromium / re2 (openSUSE-2019-2420)

This update for chromium, re2 fixes the following issues : Chromium was updated to 78.0.3904.70 boo1154806 : - CVE-2019-13699: Use-after-free in media - CVE-2019-13700: Buffer overrun in Blink - CVE-2019-13701: URL spoof in navigation - CVE-2019-13702: Privilege elevation in Installer -...

opensc:fuzz_pkcs15_reader: Crash in parse_sec_attr_44

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5681169970757632 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000013a1000 Crash...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in des_ede3_wrap

Detailed Report: https://oss-fuzz.com/testcase?key=5713917888430080 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x60200000027f Crash State: desede3wrap...

cryptofuzz:cryptofuzz-openssl: Crash in aesni_xts_encrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5673765178703872 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2420-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

Internet Bug Bounty: Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option() (CVE-2018-16229)

Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption. This vulnerability was disclosed to the tpcdump maintainers and was fixed in version 4.9.3 and disclosed as CVE-2018-16229. I was credited with finding and disclosing this vulnerability:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6319339464818688 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia:api_skdescriptor: Crash in SkDescriptor::addEntry

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5711802112933888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiskdescriptor Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6030bebec19e Crash...

cryptofuzz:cryptofuzz-openssl: Crash in _x86_64_Camellia_encrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5758762212392960 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 77.0.3865.120 fixes security issues: Four use-after-free bugs were found in Chromium 77.0.3865.90: one in the IndexedDB component CVE-2019-13693, one in the WebRTC component CVE-2019-13694, one in the audio component CVE-2019-13695, and one in the V8 component CVE-2019-13696. A...

cryptofuzz:cryptofuzz-openssl: Crash in _aesni_decrypt2

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5110881091846144 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libxslt:xpath: Heap-buffer-overflow in xmlXPathCompileExpr

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5638886922911744 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7fd03ca4f7c8 Crash...

Security testing guide for JSON / REST APIs #1/3

Fuzzing is everything ; It’s the most useful and resultative hacking technique for sure. At the same time, fuzzing is not just random hitting applications or binaries with some random bytes. It’s more about ideas, a deep understanding of data formats and application flows, technology stacks, and ...

osquery:osqueryfuzz-config: Crash in bool rapidjson::GenericValue<rapidjson::UTF8<char>, rapidjson::MemoryPoolAllocat

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5684053100986368 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01807fff8001...

llvm:llvm-opt-fuzzer--x86_64-loop_unroll: Use-of-uninitialized-value in bool llvm::DenseMapBase<llvm::DenseMap<llvm::StringRef, llvm::detail::DenseSetEm

Detailed Report: https://oss-fuzz.com/testcase?key=5077047453417472 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-loopunroll Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bool llvm::DenseMapBase...

open62541:fuzz_mdns_message: Index-out-of-bounds in _rrparse

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5691805248520192 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsmessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

U.S. Dept Of Defense: Able to log in with default ██████g creds at https█████████████████████.mil

Summary████ was able to use ████████████████████████ to log into this instance of Adobe Experience Manager, though it does not seem to be in used at the moment Description███████ while navigating to https█████████████████████████.mil, I performed some fuzzing and found that /repository was...