pcre2: Heap-buffer-overflow in compile_branch

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5425726610210816 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615000000261 Crash State:...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

Binary data 9687.pasl...

openSUSE Security Update : compat-openssl098 (openSUSE-2016-1189)

This update for compat-openssl098 fixes the following issues : OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High - OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low - Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 - Constant...

VendHQ Cross Site Request Forgery

+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+ | | | / | | | | | | | | / /\ \ | | | | | | | | | ' / |/ | ' \ | |/ | ' | | '| | | | | | | | | \ \ | | | | | | | | | | | | | | | | | |/| ||/,|| || /,|| |||| | | // Breaking Security Since Born! | | | | - Website:...

Google Plugs 21 Security Holes in Chrome Browser

Google on Wednesday patched 21 security vulnerabilities in Chrome, including a half dozen rated high severity that were reported by external researchers and were eligible for a bounty. Bug hunters earned a total of $30,000 in bounties, with a top payout of $7,500 to an unnamed researcher for a...

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ZEND-STUDIO-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============ www.zend.com Product:...

Wolf CMS 0.8 Cross Site Scripting

Title Wolf CMS 0.8 - Stored Cross-Site Scripting XSS Vulnerability + Credit Mattia Reggiani [email protected] + Advisory https://github.com/mattiareggiani/Security-Advisories/blob/master/MR-16-03WolfCMS.pdf + Vendor Homepage https://www.wolfcms.org/ + Affected Version 0.8 + Tested on Ubuntu...

SUSE-SU-2016:2458-1 Security update for openssl

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behavior CVE-2016-2177 bsc982575 Constant time flag not...

Tesla (S&X) - (Interface Pair) Code Execution Vulnerability

Document Title: =============== Tesla S&X - Interface Pair Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1586 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 15...

Volkswagen (GTE&E) - (Interface Pair) Code Execution

Document Title: =============== Volkswagen GTE&E - Interface Pair Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1606 Release Date: ============= 2016-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 1606 Comm...

Volkswagen (GTE&E) - (Interface Pair) Code Execution

Document Title: =============== Volkswagen GTE&E - Interface Pair Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1606 Release Date: ============= 2016-10-01 Vulnerability Laboratory ID VL-ID: ==================================== 1606 Comm...

Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

It has been discovered that the extension "phpMyAdmin" phpmyadmin has multiple vulnerabilities. Release Date: September 29, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 5.1.6 and below Vulnerability Type: Multiple...

Security update for openssl (important)

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 Constant time flag not...

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016

On September 22, 2016, the OpenSSL Software Foundation released an advisory that describes 14 vulnerabilities. Of these 14 vulnerabilities, the OpenSSL Software Foundation classifies one as “Critical Severity,” one as “Moderate Severity,” and the other 12 as “Low Severity.” Subsequently, on...

SUSE-SU-2016:2394-1 Security update for openssl

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 Constant time flag not...

SUSE-SU-2016:2387-1 Security update for openssl

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 Constant time flag not...

Mail.ru: Time-based sql-injection на https://puzzle.mail.ru

SQL injection via GET parameter in puzzle.mail.ru. puzzle.mail.ru is out of current bug bounty program's scope, but this report was awarded due to high severity...

Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type: Arbitrary Code Execution Severity: High Suggested CVSS v2.0:...

Lepton CMS 2.2.02.2.1 - Directory Traversal

Lepton CMS 2.2.02.2.1 - Directory Traversal + Credits: John Page HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/LEPTON-ARCHIVE-DIRECTORY-TRAVERSAL.txt + ISR: ApparitionSec Vendor: ================== www.lepton-cms.org Product:...

WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt + ISR: ApparitionSec Vendor: ============= www.wso2.com Product: ============================ Wso2 Identity Server v5.1.0...