harfbuzz/hb-subset-fuzzer: Use-of-uninitialized-value in hb_vector_t<unsigned char, 1u>::resize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5711849555755008 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in ReadCAPTIONImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5707184080420864 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openvswitch/odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5691937953153024 Project: openvswitch Fuzzer: libFuzzerodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed report: https://oss-fuzz.com/testcase?key=5747962597081088 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readTextRegionSeg

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5747049128001536 Project: poppler Fuzzer: libFuzzerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in ExportGrayQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5702333384622080 Project: graphicsmagick Fuzzer: libFuzzercoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/ping_jps_fuzzer: Heap-buffer-overflow in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5701330543312896 Project: imagemagick Fuzzer: libFuzzerpingjpsfuzzer Fuzz target binary: pingjpsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

WordPress cvp-irontec 4.8.3 Shell Upload

Exploit Title : WordPress cvp-irontec Themes 4.8.3 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

clamav/clamav_scanmap_PDF_fuzzer: Heap-buffer-overflow in pdf_nextlinestart

Detailed report: https://oss-fuzz.com/testcase?key=5168958492114944 Project: clamav Fuzzer: aflclamavscanmapPDFfuzzer Fuzz target binary: clamavscanmapPDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000188a6a Crash State:...

curl/curl_fuzzer_ftp: Crash in ftp_disconnect

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5176327364149248 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000015b0 Crash...

clamav/clamav_scanfile_PDF_fuzzer: Heap-buffer-overflow in pdf_parseobj

Detailed report: https://oss-fuzz.com/testcase?key=5727598227750912 Project: clamav Fuzzer: aflclamavscanfilePDFfuzzer Fuzz target binary: clamavscanfilePDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60900001fd8f Crash State:...

h2o/h2o-fuzzer-http2: Heap-buffer-overflow in emit_writereq_of_openref

Project: https://github.com/h2o/h2o.git Detailed report: https://oss-fuzz.com/testcase?key=5130696692072448 Project: h2o Fuzzer: aflh2o-fuzzer-http2 Fuzz target binary: h2o-fuzzer-http2 Job Type: aflasanh2o Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000001c8...

SRC-2019-0031 : Foxit Reader PDF Printer proxyPreviewAction Stack Buffer Overflow Elevation of Privilege Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Foxit Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in SkTHashTable<SkGlyph, SkPackedGlyphID, SkGlyph::HashTraits>::Hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5762384157736960 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in learn_check

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5744553198354432 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

NetChat v7.8 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== NetChat v7.8 - Persistent Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2171 Video: https://www.vulnerability-lab.com/getcontent.php?id=2174...

Subsonic v6.1.5 - Server Side Request Forgery & CSRF

Document Title: =============== Subsonic v6.1.5 - Server Side Request Forgery & CSRF References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2175 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20228 CVE-ID: ======= CVE-2018-20228 Release Date:...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5726708213219328 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/coder_MIFF_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5689395047301120 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMIFFfuzzer Fuzz target binary: coderMIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openvswitch/ofctl_parse_target: Crash in mf_check__

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5630494973100032 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: UNKNOWN READ...