vBulletin 4.2.5 Thread Post Bookmarking 1.2.0 Open Redirection

Exploit Title : vBulletin 4.2.5 Thread Post Bookmarking 1.2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/03/2019 Vendor Homepages : vbulletin.com dragonbyte-tech.com Software Information Link :...

opencv/imread_fuzzer: Use-of-uninitialized-value in Imf::copyIntoFrameBuffer

Detailed report: https://oss-fuzz.com/testcase?key=5141671744897024 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Imf::copyIntoFrameBuffer...

wireshark/fuzzshark_ip: Heap-buffer-overflow in wmem_str_hash

Detailed report: https://oss-fuzz.com/testcase?key=5711469499383808 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6020010b4270 Crash State:...

clamav/clamav_scanmap_PDF_fuzzer: Heap-buffer-overflow in pdf_nextobject

Detailed report: https://oss-fuzz.com/testcase?key=5654323172737024 Project: clamav Fuzzer: libFuzzerclamavscanmapPDFfuzzer Fuzz target binary: clamavscanmapPDFfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a00009eddd Crash State...

opencv/imread_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5708657289854976 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate uncompress2 uncompre...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in printOperand

Detailed report: https://oss-fuzz.com/testcase?key=5687796902133760 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printOperand...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in CSLTokenizeString2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5709319226523648 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

file/magic_fuzzer: Use-of-uninitialized-value in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5634761748381696 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5717091647225856 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in circular_memcpy

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5190348597362688 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in X86_insn_name

Detailed report: https://oss-fuzz.com/testcase?key=5700554943102976 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X86insnname...

skia/image_filter_deserialize_width: Use-of-uninitialized-value in SkBaseShadowTessellator::stitchConcaveRings

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5686966203449344 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserializewidth Fuzz target binary: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

openthread/radio-receive-done-fuzzer: Crash in ot::Buffer::GetNextBuffer

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5727516331868160 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/ip6-send-fuzzer: Crash in ot::Ip6::NetifUnicastAddress::GetNext

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5164037279580160 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type: UNKNOWN RE...

DomainMOD 4.11.01 Custom Domain Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Custom Domain Fields Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMo...

openthread/radio-receive-done-fuzzer: Crash in ot::Timer::GetFireTime

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5676787198066688 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::TimerScheduler::Remove

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5184402940755968 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/radio-receive-done-fuzzer: Crash in ot::Message::GetPriority

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5712935857422336 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

openthread/ip6-send-fuzzer: Crash in ot::Coap::CoapBase::RemoveResource

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5754140431482880 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type: UNKNOWN RE...

gnutls/gnutls_idna_parser_fuzzer: Use-of-uninitialized-value in _idn2_punycode_decode

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5637280142721024 Project: gnutls Fuzzer: libFuzzergnutlsidnaparserfuzzer Fuzz target binary: gnutlsidnaparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type:...