simdjson:fuzz_padded: Use-of-uninitialized-value in padded_string-inl.h

Detailed Report: https://oss-fuzz.com/testcase?key=4855610425540608 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzpadded Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: paddedstring-inl.h paddedstring.h Sanitizer...

simdjson:fuzz_minify: Use-of-uninitialized-value in simdjson::internal::string_builder<simdjson::internal::mini_formatter>::append

Detailed Report: https://oss-fuzz.com/testcase?key=4620949082406912 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzminify Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::internal::stringbuilder::append...

simdjson:fuzz_minifyimpl: Use-of-uninitialized-value in std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::vector

Detailed Report: https://oss-fuzz.com/testcase?key=4565767342587904 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzminifyimpl Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::vector::vector...

Advisory ROSA-SA-2025-3000

software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-24 affected versions grub2-2.06-24 CVE-ID: CVE-2024-45779 BDU-ID: 2025-03832 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the BFS file system of the Grub2 operating system boot loader is related to reads outside the allowed...

PT-2025-37084

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks affected versions not specified Description: The vulnerability involves the cleartext exposure of service account passwords. It is a medium-severity issue. Recommendations: At the moment, there is no information about a new...

ffmpeg:ffmpeg_dem_FLAC_fuzzer: Use-of-uninitialized-value in ff_flac_parse_picture

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5458132865449984 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemFLACfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

September Security Advisory Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access (Multiple CVEs)

Update 10 Sept Ivanti Policy Secure: Affected and Resolved in Versions updated Summary Ivanti has released updates for Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access which addresses six medium and five high vulnerabilities. We are not aware of any customers being...

Advisory ROSA-SA-2025-2974

software: libreswan 4.15 WASP: ROSA-CHROME unaffected versions = libreswan-4.15-1 affected versions libreswan-4.15-1 CVE-ID: CVE-2024-3652 BDU-ID: 2024-04885 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the "IPsec" VPN protocol library libreswan is related to a reachability assertion when...

cups:fuzz_ppd_gen_cache: Use-of-uninitialized-value in _cups_strcasecmp

Detailed Report: https://oss-fuzz.com/testcase?key=5653040024846336 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzppdgencache Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsstrcasecmp ppdCacheGetPageSize...

elfutils:fuzz-libdwfl: Crash in __elf64_getphdr_wrlock

Detailed Report: https://oss-fuzz.com/testcase?key=5817803392483328 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerubsanelfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79faf2775000 Crash State: elf64getphdrwrlock gelfgetphdr...

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

matio:matio_fuzzer: Crash in H5SL_first

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4756347221770240 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

WordPress Assistant Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Martin Herancourt in WordPress Plugin WordPress Assistant versions = 1.5.2...

gdk-pixbuf:pixbuf_scale_fuzzer: Crash in scale_line_22_33

Detailed Report: https://oss-fuzz.com/testcase?key=4848469203550208 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: pixbufscalefuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fb9fc695800 Crash State: scaleline2233 pixopsprocess...

PT-2025-35594

🟠 WhatsApp for iOS, Incomplete Authorization, CVE-2025-27890 Medium https://t.co/sEWb1FluxH...

WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WpEvently versions = 4.4.8...

WordPress Dokan Pro plugin <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation vulnerability

Authenticated Vendor+ Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin Dokan Pro versions = 4.0.5...

CVE-2025-52036

A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as o...

CVE-2025-52037

A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=sites. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of...

WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Zephyr Project Manager versions = 3.3.201...