560 matches found
int-pro-ser.com Cross Site Scripting vulnerability OBB-1266195
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the phar_tar_writeheaders_int function (ext/phar/tar.c) in the PHP programming language allows a hacker to execute arbitrary code.
The vulnerability of the phartarwriteheadersint function ext/phar/tar.c in the PHP programming language is related to the execution of operations outside of the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
OSV-2020-111 Heap-use-after-free in int std::__1::__cxx_atomic_fetch_sub<int>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21604 Crash type: Heap-use-after-free WRITE 4 Crash state: int std::1::cxxatomicfetchsub std::1::atomicbase::operator-- Object::free...
OSV-2020-66 Heap-buffer-overflow in CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21558 Crash type: Heap-buffer-overflow READ 1 Crash state: CPLErr GDALResampleChunk32RAverageT GDALResampleChunk32RAverage GDALRasterBand::RasterIOResampled...
dotnet: Denial of service via untrusted input
An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...
coe.int Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186708 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int
Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5699424467812352 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...
Linux/x86 Egghunter / Null-Free Shellcode (33 bytes)
/ Title: Linux/x86 - EggHunter + Null-Free Shellcode 33 Bytes Author: Shubham Singh Tested on: x86 GNU/Linux Shellcode Length: 33 Bytes Student ID: SLAE - 1342 Description: Null-Free Egg Hunter Shellcode - 33 Bytes file format elf32-i386 Disassembly of section .text: 08048060 : 8048060: eb 05 jmp...
PSKernel-Primitives
This repository contains a collection of PowerShell primitives for fuzzing and exploitation. The primitives are designed to be used in a Windows environment and are intended for use in red teaming and penetration testing. The repository includes the following primitives: 1. Alloc-NullPage.ps1:...
Python -- multiple vulnerabilities
Python reports: gh-95778: Converting between int and str in bases other than 2 binary, 4, 8 octal, 16 hexadecimal, or 32 such as base 10 decimal now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic...
arrow:parquet-arrow-fuzz: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5157653963866112 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...
CVE-2020-6617
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
CVE-2019-2226
In deviceclasstoint of deviceclass.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8...
CVE-2018-20815
A heap buffer overflow issue was found in the loaddevicetree function of QEMU, which is invoked to load a device tree blob at boot time. It occurs due to device tree size manipulation before buffer allocation, which could overflow a signed int type. A user/process could use this flaw to potential...
PT-2019-5691 · Exiv2 +8 · Exiv2 +8
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.2 Description: The issue is related to a lack of validation in the Exiv2 library, specifically in the crwimage int.cpp module, which can lead to a crash when the getULong function is called from CiffDirectory::readDirectory...
PT-2019-5858 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the IntensityCompare function in the /MagickCore/quantize.c component of ImageMagick, where a double value is casted to int and returned, potentially causing a value...
QEMU: device_tree: heap buffer overflow while loading device tree blob
A heap buffer overflow issue was found in the loaddevicetree function of QEMU, which is invoked to load a device tree blob at boot time. It occurs due to device tree size manipulation before buffer allocation, which could overflow a signed int type. A user/process could use this flaw to potential...
procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues
A flaw was found where procps-ng provides wrappers for standard C allocators that took unsigned int instead of sizet parameters. On platforms where these differ such as x8664, this could cause integer truncation, leading to undersized regions being returned to callers that could then be overflowe...