readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read4

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5726230161129472 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

Paypal Inc - Broken Authorization & CSRF Vulnerability

Document Title: =============== Paypal Inc - Broken Authorization & CSRF Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2181 Video: https://www.youtube.com/watch?v=52meFKU2Lqg Release Date: ============= 2019-02-08 Vulnerability Laboratory ID VL-ID:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5766188506808320 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5643065568526336 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5672597763653632 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

capstone/fuzz_disasmnext: Crash in fuzz_disasm.c

Detailed report: https://oss-fuzz.com/testcase?key=5688575243321344 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000a2e58 Crash State: fuzzdisasm.c...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5639933111304192 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in read_name

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5761668473159680 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

WordPress Blog2Social 5.0.2 Cross Site Scripting

Vulnerability: XSS Affected Software: Blog2Social Affected Version: 5.0.2 Patched Version: 5.0.3 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 11/13/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview...

WordPress Social Networks Auto-Poster 4.2.7 Cross Site Scripting

Vulnerability: XSS Affected Software: NextScripts: Social Networks Auto-Poster Affected Version: 4.2.7 Patched Version: 4.2.8 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 11/02/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium...

WordPress YOP Poll 6.0.2 Cross Site Scripting

Vulnerability: XSS Affected Software: YOP Poll Affected Version: 6.0.2 Patched Version: 6.0.3 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 11/26/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview Th...

WordPress wpGoogleMaps 7.10.41 Cross Site Scripting

Vulnerability: XSS Affected Software: wpGoogleMaps Affected Version: 7.10.41 Patched Version: 7.10.43 CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: 10/31/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

WordPress Font Organizer 2.1.1 Cross Site Scripting

Vulnerability: XSS Affected Software: FontOrganizer Affected Version: 2.1.1 Patched Version: none CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: none Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview The...

WordPress KingComposer 2.7.6 Cross Site Scripting

Vulnerability: XSS Affected Software: KingComposer Affected Version: 2.7.6 Patched Version: none CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: none Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview The...

WordPress Give 2.3.0 Cross Site Scripting

Vulnerability: XSS Affected Software: Give Affected Version: 2.3.0 Patched Version: 2.3.1 CVE: not requested Risk: Medium Vendor Contacted: 11/24/2018 Vendor Fix: 12/13/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Overview The Gi...

WordPress Contact Form Email 1.2.65 CSRF / Cross Site Scripting

Vulnerability: XSS & CSRF Affected Software: Contact Form Email Affected Version: 1.2.65 Patched Version: 1.2.66 CVE: not requested Risk: Medium Vendor Contacted: 10/31/2018 Vendor Fix: 10/31/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen Reflected XSS CVSS 6.1 Medium...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5666807308877824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

WordPress Quiz And Survey Master 6.0.4 Cross Site Scripting

Vulnerability: XSS Affected Software: Quiz And Survey Master Affected Version: 6.0.4 Patched Version: none CVE: not requested Risk: Medium Vendor Contacted: 10/25/2018 Vendor Fix: none Public Disclosure: 02/05/2019 Credit: Tim Coen CVSS 6.1 Medium CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

ots/ots-fuzzer: Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize

Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=5702836548009984 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in read_bits_16

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5637848603033600 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...