PayPal Inc BB - Arbitrary File Upload Vulnerability

Document Title: =============== PayPal Inc BB - Arbitrary File Upload Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2180 Video: https://www.youtube.com/watch?v=kcnJMKXnW1k Release Date: ============= 2019-02-01 Vulnerability Laboratory ID VL-ID:...

poppler/pdf_fuzzer: Heap-buffer-overflow in XRef::getEntry

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5762973841227776 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow...

Self-Encrypting Drive Vulnerabilities - Lenovo Support US

No description provided...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in LoadTGA

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5733334540353536 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read2

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5667847940866048 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in fetchARGB32ToRGBA64PM

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5725289194192896 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in XCFImageFormat::copyLayerToImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5650960263675904 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_srvloc

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5692881157750784 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=5707234535800832 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read8

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5112294457999360 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

openthread/cli-uart-received-fuzzer: Index-out-of-bounds in ot::RouterTable::IsAllocated

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5744891089387520 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Cras...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in std::__1::basic_streambuf<char, std::__1::char_traits<char> >::xsgetn

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5662852382195712 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in r_read_le32

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5166506139189248 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000027603...

openthread/cli-uart-received-fuzzer: Memcpy-param-overlap in ot::Cli::CoapSecure::Process

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5745974335504384 Project: openthread Fuzzer: aflopenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...

Joomla RSFirewall 2.11.25 Database Disclosure

Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/01/2019 Vendor Homepage : rsjoomla.com Software Download Link : extensions.joomla.org/extension/rsfirewall/ Software...

Podcast Generator 2.7 Cross Site Scripting

Stored Cross-site Scripting Vulnerability in Podcast Generator 2.7 Information -------------------- Advisory by Netsparker Name: Stored Cross-site scripting in Podcast Generator 2.7 Affected Software: Podcast Generator Affected Versions: 2.7 Homepage: http://www.podcastgenerator.net/ Vulnerabilit...

openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5765968641392640 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

tidy-html5/tidy_fuzzer: Use-of-uninitialized-value in prvTidyDecodeUTF8BytesToChar

Detailed report: https://oss-fuzz.com/testcase?key=5761066850582528 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzermsantidy-html5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5654741512617984 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

USN-3848-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3848-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.0...