harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4687441845813248 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

file: Heap-buffer-overflow in file_strncmp

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5459505435377664 Project: file Fuzzer: libFuzzerfilemagicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000173 Crash State: filestrncm...

Zhiyuan A6-m Collaboration Management Software Enterprise Edition Has Violent Breakthrough Vulnerabilities

Zhiyuan A6-m Collaboration Management Software Enterprise Edition is a collaboration management software for small and medium-sized enterprises. A6-m Collaboration Management Software Enterprise Edition suffers from a brute force vulnerability. This vulnerability allows attackers to brute-force...

libreoffice: Crash in HStream::readBytes

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4509432228610048 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

Bitdefender - Cross Site Request Forgery Vulnerability

Document Title: =============== Bitdefender - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2040 Video: https://www.youtube.com/watch?v=jnNa4i01aok Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID:...

Bitdefender - Cross Site Request Forgery Vulnerability

Document Title: =============== Bitdefender - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2040 Video: https://www.youtube.com/watch?v=jnNa4i01aok Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID:...

grpc: Crash in gpr_strdup

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5391467415601152 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffc0 Crash...

X (Formerly Twitter): [URGENT] Opportunity to publish tweets on any twitters account

The reporter discovered a flaw in the handling of Twitter Ads Studio requests which allowed an attacker to tweet as any user. By sharing media with a victim user and then modifying the post request with the victim's account ID the media in question would be posted from the victim's account. This...

grpc: Crash in grpc_channel_create

Detailed report: https://oss-fuzz.com/testcase?key=5184759229579264 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x000000000001 Crash State: grpcchannelcreate...

EasyCom SQL iPlug Denial Of Service

Credits: John Page AKA Hyp3rlinX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ================ easycom-aura.com Product: =========== SQL iPlug EasycomPHP4.0029.iC8im2.exe SQL iPlug...

libreoffice: Crash in CCIDecompressor::DecompressScanline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5956342118350848 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN Crash...

EasyCom For PHP 4.0.0 - Denial of Service

Credits: John Page AKA Hyp3rlinX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ================ easycom-aura.com Product: =========== SQL iPlug EasycomPHP4.0029.iC8im2.exe SQL iPlug...

EasyCom For PHP 4.0.0 - Denial of Service

EasyCom For PHP 4.0.0 - Denial of Service + Credits: John Page AKA Hyp3rlinX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ================ easycom-aura.com Product: =========== SQL iPl...

ProjectSend r754 - IDOR & Authentication Bypass

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 2031 Comm...

ProjectSend r754 - IDOR & Authentication Bypass

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 2031 Comm...

Lithium Forum Server-Side Request Forgery

Document Title: =============== Lithium Forum - Compose Message SSRF Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2030 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ==================================== 2030...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:0461-1)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed bsc1019334 - CVE-2016-8610: A remote denial of service in...

file: Heap-buffer-overflow in is_tar

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5719138181840896 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

json: Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5009340075343872 Project: json Fuzzer: libFuzzerjsonparseaflfuzzer Fuzz target binary: parseaflfuzzer Job Type: libfuzzerasanjson Platform Id: linux Crash Type: Heap-buffer-overflo...

Apache OpenOffice Text Document Malicious Macro Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'cgi' class MetasploitModule "Apache OpenOffice Text Document Malicious Macro Execution", 'Description' = %q This module...