Huawei Backup App v6.30.52.12.L - Session Vulnerability

Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-30...

Huawei Backup App - Mobile Reset Session Vulnerability

Document Title: =============== Huawei Backup App - Mobile Reset Session Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1987 Video: https://www.youtube.com/watch?v=YAW9yL1CoW8 Advisory:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5402342898794496 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in sqlite3ExprCollSeq

Detailed report: https://oss-fuzz.com/testcase?key=5684890744913920 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3ExprCollSeq...

imagemagick/encoder_dng_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed report: https://oss-fuzz.com/testcase?key=4830316907724800 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in getwords

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5690601575022592 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned short>

Detailed report: https://oss-fuzz.com/testcase?key=5072963467476992 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

freetype2/ftfuzzer: Heap-buffer-overflow in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=5000847376252928 Project: freetype2 Fuzzer: aflfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000008401 Crash State: pcfgetencodings...

Integrated Management Module 2 (IMM2) First Failure Data Capture (FFDC) Information Disclosure - Lenovo Support US

No description provided...

freetype2/ftfuzzer: Heap-buffer-overflow in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=6409167655927808 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60500000340f Crash State:...

Barracuda Cloud 3.0.020 - Contents Persistent Vulnerability

Document Title: =============== Barracuda Cloud 3.0.020 - Contents Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=782 Release Date: ============= 2018-07-24 Vulnerability Laboratory ID VL-ID: ====================================...

Banana PI Lamobo R1 SD v3 - New Universal Router Case

Document Title: =============== Banana PI Lamobo R1 SD v3 - New Universal Router Case References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2140 Download: https://www.vulnerability-lab.com/resources/documents/2140.rar Vulnerability Magazine:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in splashOutBlendDarken

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5151581400989696 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

Barracuda Cloud 3.0.020 - Persistent XSS Vulnerability

Document Title: =============== Barracuda Cloud 3.0.020 - Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=782 Release Date: ============= 2018-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 782...

Banana PI Lamobo R1 SD v3 - New Universal Router Case

Document Title: =============== Banana PI Lamobo R1 SD v3 - New Universal Router Case References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2140 Download: https://www.vulnerability-lab.com/resources/documents/2140.rar Vulnerability Magazine:...

freetype2/ftfuzzer: Crash in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=6221557377531904 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6170000c8f60 Crash State: pcfgetencodings pcfloadfon...

gdal/gdal_fuzzer: Crash in void GDALFastCopy<unsigned char>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5598766517190656 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f43b3589ffe Crash Stat...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in IsFuzzyEquivalencePixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6090470814908416 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5086254713536512 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

Shopify - Persistent XML Cross Site Scripting Vulnerability

Document Title: =============== Shopify - Persistent XML Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1983 Video: https://www.youtube.com/watch?v=LDiXveqQ0gg Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID:...