Icyphoenix 2.2.0.105 SQL Injection

Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2006 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID:...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::EndMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6693392806313984 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

libreoffice/lwpfuzzer: Heap-buffer-overflow in LwpSilverBullet::IsLesserLevel

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5741892999315456 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

SonicWall SonicOS NSA - Bypass & Persistent Vulnerability

Document Title: =============== SonicWall SonicOS NSA - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1729 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5281...

dlplibs/key6fuzzer: Use-of-uninitialized-value in libetonyek::IWAParser::queryObject

Detailed report: https://oss-fuzz.com/testcase?key=5818720568999936 Project: dlplibs Fuzzer: libFuzzerdlplibskey6fuzzer Fuzz target binary: key6fuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libreoffice/pptxfuzzer: Heap-buffer-overflow in EVP_CipherInit_ex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6203225368690688 Project: libreoffice Fuzzer: libFuzzerlibreofficepptxfuzzer Fuzz target binary: pptxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::StartMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4617455260401664 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities

Document Title: =============== Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2055 Playlist: https://www.youtube.com/playlist?list=PL2hnNNM3yw-3svLm9UdSzvlVVZcx5DxV Videos:...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Crash in BigPtrArray::Index2Block

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5431178891886592 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

libreoffice/htmlfuzzer: Container-overflow in HTMLTableRow::GetCell

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6656273752784896 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overfl...

TP-Link TL-SG108E XSS / Weak Access Control

Overview ------------- Three vulnerabilities have been discovered in the TP-Link TL-SG108E, firmware 1.0.0 Build 20160722 Rel.50167: CVE-2017-17745 - Cross Site Scripting XSS in systemnameset.cgi, sysName parameter CVE-2017-17746 - Weak access control for user authentication CVE-2017-17747 - Weak...

libreoffice/fodsfuzzer: Heap-buffer-overflow in rtl_string_newFromStr

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5008090362544128 Project: libreoffice Fuzzer: libFuzzerlibreofficefodsfuzzer Fuzz target binary: fodsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

gdal/mitab_tab_fuzzer: Heap-buffer-overflow in TABINDNode::FindFirst

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4754517640871936 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

esquareworld.com XSS vulnerability

Open Bug Bounty ID: OBB-453470 Description| Value ---|--- Affected Website:| esquareworld.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Fedora Update for pdns-recursor FEDORA-2017-1585789772

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wpantund/wpantund-fuzz: Heap-use-after-free in nl::wpantund::SpinelNCPTaskGetNetworkTopology::parse_child_entry

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=6322864912334848 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free REA...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::ConvertFileHeader

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5344878679556096 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=4646937367150592 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

gdal/gdal_filesystem_fuzzer: Crash in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5620335064907776 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...