skia/api_path_measure: Heap-buffer-overflow in compute_pos_tan

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5634563479437312 Project: skia Fuzzer: libFuzzerskiaapipathmeasure Fuzz target binary: apipathmeasure Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

skia/api_path_measure: Use-of-uninitialized-value in bool set_point_length<false>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5673676119212032 Project: skia Fuzzer: libFuzzerskiaapipathmeasure Fuzz target binary: apipathmeasure Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia/api_mock_gpu_canvas: Heap-buffer-overflow in compute_pos_tan

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667344397893632 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

tidy-html5/tidy_fuzzer: Crash in GetSurrogatePair

Detailed report: https://oss-fuzz.com/testcase?key=5741081738608640 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzerasantidy-html5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604000010000 Crash State: GetSurrogatePair...

openh264/decoder_fuzzer: Use-of-uninitialized-value in FilterInput8bitWithStride_c

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5760617347022848 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

keystone/fuzz_asm_x86_32: Use-of-uninitialized-value in llvm_ks::isIntN

Detailed report: https://oss-fuzz.com/testcase?key=5633466098515968 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8632 Fuzz target binary: fuzzasmx8632 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvmks::isIntN...

keystone/fuzz_asm_mips64be: Use-of-uninitialized-value in adjustFixupValue

Detailed report: https://oss-fuzz.com/testcase?key=5680137981394944 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmmips64be Fuzz target binary: fuzzasmmips64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: adjustFixupValue...

keystone/fuzz_asm_arm_thumbv8: Use-of-uninitialized-value in llvm_ks::ARMAsmBackend::reasonForFixupRelaxation

Detailed report: https://oss-fuzz.com/testcase?key=5748284482650112 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmthumbv8 Fuzz target binary: fuzzasmarmthumbv8 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5752853455437824 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5129478546653184 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read4

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5726230161129472 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

Paypal Inc - Broken Authorization & CSRF Vulnerability

Document Title: =============== Paypal Inc - Broken Authorization & CSRF Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2181 Video: https://www.youtube.com/watch?v=52meFKU2Lqg Release Date: ============= 2019-02-08 Vulnerability Laboratory ID VL-ID:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5766188506808320 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5643065568526336 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5672597763653632 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

capstone/fuzz_disasmnext: Crash in fuzz_disasm.c

Detailed report: https://oss-fuzz.com/testcase?key=5688575243321344 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000a2e58 Crash State: fuzzdisasm.c...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5639933111304192 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in read_name

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5761668473159680 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

WordPress Blog2Social 5.0.2 Cross Site Scripting

Vulnerability: XSS Affected Software: Blog2Social Affected Version: 5.0.2 Patched Version: 5.0.3 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 11/13/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview...

WordPress Social Networks Auto-Poster 4.2.7 Cross Site Scripting

Vulnerability: XSS Affected Software: NextScripts: Social Networks Auto-Poster Affected Version: 4.2.7 Patched Version: 4.2.8 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 11/02/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium...