libhtp:fuzz_htp: Use-of-uninitialized-value in LzmaDec_TryDummy

Project: https://github.com/OISF/libhtp.git Detailed Report: https://oss-fuzz.com/testcase?key=5164808743157760 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

aspell:aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeUtf8::decode

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5688876424757248 Project: aspell Fuzzing Engine: libFuzzer Fuzz Target: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libxslt:xpath: Heap-buffer-overflow in xsltFormatNumberConversion

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5656808252768256 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000131f Crash...

php:php-fuzz-exif: Heap-buffer-overflow in php_ifd_get32u

Detailed Report: https://oss-fuzz.com/testcase?key=5720780498796544 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400002f9f9 Crash State: phpifdget32u exifconvertanytoint...

openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5691354285342720 Project: openthread Fuzzing Engine: afl Fuzz Target: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

python3-libraries:fuzzer-decode: Heap-buffer-overflow in PyState_AddModule

Detailed Report: https://oss-fuzz.com/testcase?key=5723360180305920 Project: python3-libraries Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decode Job Type: libfuzzerasanpython3-libraries Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60c000002880 Crash State:...

matio:matio_fuzzer: Use-of-uninitialized-value in psnip_safe_size_mul

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5767840606453760 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

matio:matio_fuzzer: Stack-buffer-overflow in Mat_VarReadNextInfo5

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5670549967077376 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffc36a0f020 Crash State...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarRead5

Detailed Report: https://oss-fuzz.com/testcase?key=5661966038728704 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MatVarRead5 MatVarRead5 MatVarRead5 Sanitizer:...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarRead5

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5658118452674560 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

matio:matio_fuzzer: Stack-buffer-overflow in Mat_uint32Swap

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5647739899084800 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f9237c61880 Crash State...

OpenEdx Ironwood.1 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting Vulnerabilities in OpenEdx version Ironwood.1 Affected Software: OpenEdx Affected Versions: Ironwood.1 Homepage: https://open.edx.org/ Vulnerability: Cross site Scripting Severity: Medium Status:...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5641535651053568 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_hash_find

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5761352991244288 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

New Relic: Passive stored XSS at Synthetics job result page (View resource)

Hey team, I've discovered a stored XSS at Synthetics job result page. There is a View resource link near every URL which was requested by a browser and this link href is the requested URL itself: F577804 All the URLs, the browser interacted with, are saved into the database by a minion, when the...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevc_recon_32x32

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5716526304329728 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value...

skia:sksl2spirv: Heap-buffer-overflow in SkSL::FunctionDeclaration::determineFinalTypes

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5736337256218624 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6030000006f8...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_parse_coding_unit

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5647284229898240 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevc_deblk_luma_vert_ssse3

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5745258909925376 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevcd_fmt_conv_420sp_to_rgb565

Detailed Report: https://oss-fuzz.com/testcase?key=5728697516032000 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ihevcdfmtconv420sptorgb565 ihevcdfmtconv...