hostap/ap-mgmt-fuzzer: Crash in copy_supp_rates

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737950014341120 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in ap_free_sta

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5713840416751616 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in mlme_deauthenticate_indication

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5675224822972416 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in load

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5749546694475776 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in symbols

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5199845842747392 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

envoy/h1_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5756178220449792 Project: envoy Fuzzer: libFuzzerenvoyh1capturedirectresponsefuzztest Fuzz target binary: h1capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f55425a59b0 Crash...

libspng/spng_read_fuzzer_structure_aware: Crash in validate_past_idat

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed report: https://oss-fuzz.com/testcase?key=5162723165339648 Project: libspng Fuzzer: libFuzzerlibspngspngreadfuzzerstructureaware Fuzz target binary: spngreadfuzzerstructureaware Job Type:...

hostap/p2p-fuzzer-action: Use-of-uninitialized-value in p2p_send_action

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5679294988156928 Project: hostap Fuzzer: libFuzzerhostapp2p-fuzzer-action Fuzz target binary: p2p-fuzzer-action Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

hostap/ap-mgmt-fuzzer: Heap-buffer-overflow in ssid_match

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5206623624101888 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

hostap/p2p-fuzzer-action: Use-of-uninitialized-value in p2p_send_action

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5126192979509248 Project: hostap Fuzzer: libFuzzerhostapp2p-fuzzer-action Fuzz target binary: p2p-fuzzer-action Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

hostap/wnm-fuzzer: Heap-buffer-overflow in WPA_GET_LE64

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5179747476176896 Project: hostap Fuzzer: aflhostapwnm-fuzzer Fuzz target binary: wnm-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000045b...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5703608798019584 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in printUInt32

Detailed report: https://oss-fuzz.com/testcase?key=5676826040467456 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printUInt32...

Microsoft Internet Explorer 11 - Sandbox Escape Exploit

Exploit for windows platform in category local exploits Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...

WordPress Jingke 1.0 Open Redirection

Exploit Title : WordPress Jingke Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : hwaq.cc - zmingcx.com WordPress Affected Version : 4.9.x Theme Affected Version : 1.0 Information Link :...

WordPress Aliyun 5.2 Open Redirection

Exploit Title : WordPress Aliyun Themes 5.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : aliyunhelp.com - zmingcx.com Version : WordPress Version 4.9.10 - Theme Version 5.2 Tested On : Windows and Linux Category :...

Microsoft Internet Explorer 11 - Sandbox Escape

Microsoft Internet Explorer 11 - Sandbox Escape Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...

Microsoft Internet Explorer 11 - Sandbox Escape

Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...

imagemagick/encoder_ptif_fuzzer: Heap-buffer-overflow in PushShortPixel

Detailed report: https://oss-fuzz.com/testcase?key=5722372625137664 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000004e84...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::setNum

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5649136667328512 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...