3376 matches found
Exploit for CVE-2017-3143
Awesome Vulnerability Research 🦄 A curated list of the awesome resources about the Vulnerability Research First things first: There are no exploits in this project. Vulnerabilities != Exploits A Vulnerability resides in the software itself, doing nothing on its own. If you are really curious abou...
PoC
Pedro Ribeiro @pedrib Exploit Dumping Grounds === This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own...
pyodbc:fuzz_curs_exec: Heap-buffer-overflow in libodbc.so.2
Project: https://github.com/mkleehammer/pyodbc.git Detailed Report: https://oss-fuzz.com/testcase?key=5228169928179712 Project: pyodbc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcursexec Job Type: libfuzzerasanpyodbc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6239115505106944 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
BACFuzz: Exposing the Silence on Broken Access Control Vulnerabilities in Web Applications
Broken Access Control BAC remains one of the most critical and widespread vulnerabilities in web applications, allowing attackers to access unauthorized resources or perform privileged actions. Despite its severity, BAC is underexplored in automated testing due to key challenges: the lack of...
arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::DeltaByteArrayDecoderImpl<parquet::PhysicalType<
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5504019512754176 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x50a000000240 Crash...
pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6Address::IPv6Address
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5415471581298688 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...
Architectural Backdoors in Deep Learning: a Survey of Vulnerabilities, Detection, and Defense
Architectural backdoors pose an under-examined but critical threat to deep neural networks, embedding malicious logic directly into a model's computational graph. Unlike traditional data poisoning or parameter manipulation, architectural backdoors evade standard mitigation techniques and persist...
PT-2025-35974
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where a maliciously fuzzed file system can trigger a BUG ON in the ext4 update inline data function when an inode has the INLINE DATA FL flag set but is...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5833321567551488 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
simd:simd_load_fuzzer: Index-out-of-bounds in Simd::Avx2::jpeg__jpeg_decode_block
Detailed Report: https://oss-fuzz.com/testcase?key=5711505591173120 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerubsansimd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Simd::Avx2::jpegjpegdecodeblock...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4636919990648832 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
BandFuzz: an ML-Powered Collaborative Fuzzing Framework
Collaborative fuzzing has recently emerged as a technique that combines multiple individual fuzzers and dynamically chooses the appropriate combinations suited for different programs. Unlike individual fuzzers, which rely on specific assumptions to maintain their effectiveness, collaborative...
Qualcomm Trusted Application Emulation for Fuzzing Testing
In recent years, the increasing awareness of cybersecurity has led to a heightened focus on information security within hardware devices and products. Incorporating Trusted Execution Environments TEEs into product designs has become a standard practice for safeguarding sensitive user information...
OSV-2025-542 Use-of-uninitialized-value in httpEncode64_3
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110066 Crash type: Use-of-uninitialized-value Crash state: httpEncode643 fuzzhttpcore.c fuzzhttpcore.c...
Monero: Reported RPC Overflow
A stack buffer overflow was reported in the Monero RPC server. Specifically, on line 1291 of the corerpcserver.cpp file, an overflow could occur if the size of the b.data did not match the size of the crypto::keyimage. Additionally, a missing return statement was found following line 1289. The...
jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...
checkstyle:CheckstyleFuzzer: Security exception in java.base/java.util.ArrayList.forEach
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4794856155447296 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...