PSKernel-Primitives

This repository contains a collection of PowerShell primitives for fuzzing and exploitation. The primitives are designed to be used in a Windows environment and are intended for use in red teaming and penetration testing. The repository includes the following primitives: 1. Alloc-NullPage.ps1:...

ndpi:fuzz_ndpi_reader: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5112736746045440 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_ndpi_reader: Use-of-uninitialized-value in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638243526901760 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_irc_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4788353921974272 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address: 0x611000257ec0 Crash State...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in concat_hash_string

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5742376787378176 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60f000003a12 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in ff_dsd2pcm_translate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5693323504517120 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Poor Rowhammer Fixes On DDR4 DRAM Chips Re-Enable Bit Flipping Attacks

Remember rowhammer vulnerability? A critical issue affecting modern DRAM dynamic random access memory chips that could allow attackers to obtain higher kernel privileges on a targeted system by repeatedly accessing memory cells and induce bit flips. To mitigate Rowhammer vulnerability on the late...

samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=6220865596555264 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002fc Crash State: lzxpressdecompress...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::PlainByteArrayDecoder::DecodeArrowDense

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5745965288128512 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Stable Channel Update for Desktop

The stable channel has been updated to 80.0.3987.132 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oscar_tcp_connect

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5657110761439232 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60800029d57a Crash State...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::internal::RecordReader::Make

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5672125707059200 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000015cf0 Crash...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_lexer_multi

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5716123570143232 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000442 Crash State:...

pcre2:pcre2_fuzzer: Crash in match

Detailed Report: https://oss-fuzz.com/testcase?key=6290883744104448 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fff9416d140 Crash State: match pcre2match8 pcre2fuzzsupport.c Sanitizer...

ndpi:fuzz_process_packet: Heap-buffer-overflow in check_ymsg

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5753857978400768 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x607000000452...

ndpi:fuzz_process_packet: Heap-buffer-overflow in get16

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5743421140762624 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60b0000252ab Crash State...

ndpi:fuzz_process_packet: Index-out-of-bounds in ndpi_search_mail_imap_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5110863348629504 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_netbios_name_interpret

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5692504412520448 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60800000bf00 Crash State...

arrow:parquet-arrow-fuzz: Crash in parquet::arrow::ReconstructNestedList

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6266374655836160 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffff7b8 Cra...

ndpi:fuzz_process_packet: Index-out-of-bounds in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5756942008188928 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...