libxml2: Index-out-of-bounds in xmlAddDefAttrs

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6187774258446336 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerubsanlibxml2 Platform Id: linux Crash Type:...

harfbuzz: Index-out-of-bounds in hb_ot_face_metrics_accelerator_t::get_advance

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5672141338968064 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

pcre2: Index-out-of-bounds in do_callout

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5212192485933056 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

harfbuzz: Index-out-of-bounds in OT::ContextFormat3::sanitize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4769173588672512 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

ffmpeg: Heap-buffer-overflow in y41p_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4569970002362368 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDY41Pfuzzer Fuzz target binary: ffmpegAVCODECIDY41Pfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Heap-buffer-overflow in decode_subband_slice_buffered

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6108700873850880 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

ffmpeg: Heap-buffer-overflow in y216_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6361794975105024 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDTARGAY216fuzzer Fuzz target binary: ffmpegAVCODECIDTARGAY216fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in ff_htmlmarkup_to_ass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5520132195483648 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSAMIfuzzer Fuzz target binary: ffmpegAVCODECIDSAMIfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Index-out-of-bounds in read_sbr_grid

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5370707196248064 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

WordPress WebDorado Gallery 1.3.29 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011 Software...

ffmpeg: Index-out-of-bounds in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5212314171080704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

dlplibs: Crash in librevenge::IStorage::load

Detailed report: https://oss-fuzz.com/testcase?key=5488429968130048 Project: dlplibs Fuzzer: afldlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619800000f78 Crash State: librevenge::IStorage::load...

Zomato Bug Bounty - Account Take Over Vulnerability

Document Title: =============== Zomato Bug Bounty - Account Take Over Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2063 Video: https://www.youtube.com/watch?v=2326m6ddthg Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID:...

Zenario 7.6 Cross Site Scripting

Document Title: =============== Zenario v7.6 - Delete Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2042 Release Date: ============= 2017-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Zomato Bug Bounty - Account Take Over Vulnerability

Document Title: =============== Zomato Bug Bounty - Account Take Over Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2063 Video: https://www.youtube.com/watch?v=2326m6ddthg Release Date: ============= 2017-05-02 Vulnerability Laboratory ID VL-ID:...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6321875116359680 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000001c0 Cra...

NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us

Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...

Medium: util-linux

Issue Overview: Sending SIGKILL to other processes with root privileges via su: A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.CVE-2017-26...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4658680639258624 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000dc1 Cra...

Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-26 Vulnerability Laboratory ID VL-ID: ==================================...