imagemagick:encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseXPMColor

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5736863532318720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:ping_gif_fuzzer: Use-of-uninitialized-value in InterpretLocaleValue

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5117184281411584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5033441388658688 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:ping_ptif_fuzzer: Heap-buffer-overflow in TIFFGetProfiles

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5638770103156736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

open62541:fuzz_mdns_message: Index-out-of-bounds in _rrparse

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5691805248520192 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsmessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

imagemagick:encoder_tiff_fuzzer: Crash in TIFFReadCustomStream

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5636362253893632 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Addres...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5760144234774528 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x606000006c00 Crash...

jsoncpp:jsoncpp_fuzzer: Heap-buffer-overflow in Json::OurReader::readComment

Project: https://github.com/open-source-parsers/jsoncpp.git Detailed Report: https://oss-fuzz.com/testcase?key=4831282042765312 Project: jsoncpp Fuzzing Engine: libFuzzer Fuzz Target: jsoncppfuzzer Job Type: libfuzzerasanjsoncpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:enhance_fuzzer: Heap-buffer-overflow in ReadWebPLSBWord

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5706001122066432 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:encoder_viff_fuzzer: Use-of-uninitialized-value in ClampToQuantum

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5726728634236928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:ping_mng_fuzzer: Use-of-uninitialized-value in LosslessReduceDepthOK

Detailed Report: https://oss-fuzz.com/testcase?key=5714758107398144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LosslessReduceDepthOK...

radare2:ia_fuzz: Heap-buffer-overflow in r_str_utf8_codepoint

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4886464738885632 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200003fed2...

Openfire 4.4.1 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in Openfire 4.4.1 Affected Software: Openfire Affected Versions: 4.4.1 Vendor Homepage: https://www.igniterealtime.org/ Vulnerability Type: Cross-site Scripting Severity: Medium Status: Fix...

freetype2:glyphs-bitmaps-pcf: Heap-buffer-overflow in triplet_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5687246878932992 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: glyphs-bitmaps-pcf Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d00000096f Crash State: tripletdecode...

U.S. Dept Of Defense: Able to log in with default ██████g creds at https█████████████████████.mil

Summary████ was able to use ████████████████████████ to log into this instance of Adobe Experience Manager, though it does not seem to be in used at the moment Description███████ while navigating to https█████████████████████████.mil, I performed some fuzzing and found that /repository was...

usrsctp:fuzzer_connect: Heap-buffer-overflow in sctp_handle_asconf

Project: https://github.com/weinrank/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5665964259016704 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x611000371180...

libsass:data_context_fuzzer: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Project: https://github.com/sass/libsass.git Detailed Report: https://oss-fuzz.com/testcase?key=5721443934928896 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

llvm:llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=5717405149429760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x620000003e60 Crash State: pere pere pere...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_process

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5710018845868032 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

mruby:mruby_fuzzer: Crash in local_add_lv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5695723449876480 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003809 Crash State:...