harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in AAT::KerxSubTableFormat4<AAT::KerxSubTableHeader>::driver_context_t::transition

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5667182741028864 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

Joomla Simple RSS Feed Reader mod_jw_srfr 3.6.0 Open Redirection

Exploit Title : Joomla Simple RSS Feed Reader modjwsrfr 3.6.0 Modules Open Redirect Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/01/2019 Vendor Homepage : joomlaworks.net Software Download Links : joomlaworks.net/downloads/?f=modjwsrfr-v3.6.0j2.5-3.x.zip...

clamav/clamav_scanfile_PE_fuzzer: Heap-buffer-overflow in unaspack

Detailed report: https://oss-fuzz.com/testcase?key=5673520888020992 Project: clamav Fuzzer: aflclamavscanfilePEfuzzer Fuzz target binary: clamavscanfilePEfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200000700d Crash State: unaspack...

imagemagick/ping_mvg_fuzzer: Crash in RelinquishMagickMemory

Detailed report: https://oss-fuzz.com/testcase?key=5762201575489536 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff9 Crash State:...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkPerlinNoiseShaderImpl::PaintingData::stitch

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5644642953986048 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in float const& SkTMin<float>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5698138449379328 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

AudioCode 400HD Cross Site scripting

CVE-2018-10091 Stored XSS vulnerabilities in AudioCode IP phones Description The AudioCodes 400HD series of IP phones is a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. Most of user inputs in the CG...

imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob

Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Synaptics Pointing Device Driver Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-24573 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-16098 Summary Description: A researcher reported to Lenovo an unquoted search path vulnerability was found in Synaptics Pointing Device drivers of some...

Synaptics Pointing Device Driver Vulnerability - Lenovo Support US

No description provided...

Intel® Storage NVMe and Rapid Storage Technology (RSTe) - Lenovo Support US

No description provided...

Microsoft Skype v8.34 Android - Authentication Bypass

Document Title: =============== Microsoft Skype v8.34 Android - Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2177 MSRC Bulletin: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622 Video:...

yara/dex_fuzzer: Heap-buffer-overflow in read_uleb128

Detailed report: https://oss-fuzz.com/testcase?key=5664859499266048 Project: yara Fuzzer: libFuzzeryaradexfuzzer Fuzz target binary: dexfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60d000000261 Crash State: readuleb128...

Low, Medium and High Interaction Honeypot Security

Honeypots are a popular way to protect data centers and learn about attackers. Learn the difference between high and low interaction honeypot security...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=5707327297028096 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

SmartWorks Systems Pakistan 1.0 SQL Injection

Exploit Title : SmartWorks Systems Pakistan 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : smartworks.pk Tested On : Windows Exploit Risk : Medium Category : WebApps Version Information : Nginx 1.14.1 - jQuery 1.11.1 - jQuery UI 1.10.4 CWE : CWE-89...

Rayleigh Enterprise Management MiitBeianGovCn 1.0 SQL Injection

Exploit Title : Rayleigh Enterprise Management MiitBeianGovCn 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : miitbeian.gov.cn Tested On : Windows Exploit Risk : Medium Version Information : 1.0 CWE : CWE-89 Improper Neutralization of Special Elements...

BTOptions Web Design 1.0 SQL Injection

Exploit Title : BTOptions Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/12/2018 Vendor Homepage : btoptions.com Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0 - WebServer Apache CW...

openvswitch/ofctl_parse_target: Heap-buffer-overflow in encode_LEARN

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5651435740463104 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5631444412530688 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...