MGASA-2021-0007 Updated c-ares packages fix security vulnerabilities

Avoid read-heap-buffer-overflow in aresparsesoareply found during fuzzing. Avoid theoretical buffer overflow in RC4 loop comparison. Empty hquery-name could lead to invalid memory access. aresparsea,aaaareply could return a larger naddrttls than was passed in...

h1-ctf: Complete destruction of the Grinch server

Hackyholidays flag 1 First flag is just a matter of reading /robots.txt file: User-agent: Disallow: /s3cr3t-ar3a Flag: flag48104912-28b0-494a-9995-a203d1e261e7 flag 2 Visiting /s3cr3t-ar3a and opening it with developer tools gets the second flag: flagb7ebcb75-9100-4f91-8454-cfb9574459f7 It is...

h1-ctf: Invading Grinch Network and Saving Christmas

How we saved Christmas As usual with H1 CTF challenges we are provided with a target URL. In our case it is the following: https://hackyholidays.h1ctf.com/ We started by visiting the URL and see what is going on. All we could see is a page with an image with a warning message. F1125722 We quickly...

Gustave - Embedded OS kernel fuzzer

GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see GUSTAVE as a AFL forkserver implementation inside QEMU, with fine grain...

RESTler - The First Stateful REST API Fuzzing Tool For Automatically Testing Cloud Services Through Their REST APIs And Finding Security And Reliability Bugs In These Services

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI/Swagger specification, RESTler analyzes its entire specification, and then...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2742-1)

This update for libqt5-qtbase fixes the following issues : CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 Fixed various issues discovered by fuzzing : Made handling of XDGRUNTIMEDIR more secure bsc1172515 : Note that Tenable Network Security has extracted the preceding descripti...

Packer-Fuzzer - A Fast And Efficient Scanner For Security Detection Of Websites Constructed By Javascript Module Bundler Such As Webpack

With the popularity of web front-end packaging tools, have you encountered more and more websites represented by Webpack packager in daily penetration testing and security services? This type of packager will package the API and API parameters of the entire site together for centralized Web call,...

OPENSUSE-SU-2020:2142-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 - Fixed various issues discovered by fuzzing: - Made handling of XDGRUNTIMEDIR more secure bsc1172515: This update was imported from the SUSE:SLE-15-SP2:Update update proje...

serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

UAFuzz - Binary-level Directed Fuzzing For Use-After-Free Vulnerabilities

Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 static analysis report verification. There are recently more research work tha...

Py3Webfuzz - A Python3 Module To Assist In Fuzzing Web Applications

Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of vulnerabilities in web applications, Web Services through brute force, fuzzing and analysis. The module does this by providing common testing values, generators and other utilities that would be helpful when...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_utils_time_to_seconds

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087208312406016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Ultimate Project Manager CRM PRO 2.05 SQL Injection

Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage Date: 2020-16-09 Exploit Author: nag0mez Vendor Homepage: https://ultimatepro.codexcube.com/ Version: = 2.0.5 Tested on: Kali Linux 2020.2 The SQLi injection does not allow UNION payloads. However, we can guess...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5727693351682048 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000024000 Crash State: grk::Subband::Subband...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::rev_fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4862900302512128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900510e1fc Crash State: ojph::local::revfetch...

libreoffice:sftfuzzer: Stack-buffer-overflow in ParseCMAP

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4859879712620544 Project: libreoffice Fuzzing Engine: afl Fuzz Target: sftfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

qcms:fuzz: Heap-buffer-overflow in qcms::chain::qcms_modular_transform_create_lut::h1a73851109fbc700

Detailed Report: https://oss-fuzz.com/testcase?key=5081913385287680 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6020000000b8 Crash State:...

suricata:fuzz_siginit: Use-of-uninitialized-value in DetectDatarepParse

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5762961148477440 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...