dlplibs/cdrfuzzer: Use-of-uninitialized-value in libcdr::CDRParserState::_getRGBColor

Detailed report: https://oss-fuzz.com/testcase?key=5767834947813376 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia/api_draw_functions: Use-of-uninitialized-value in is_finite

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5734506001596416 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in cf2_glyphpath_lineTo

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5724012322750464 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openthread/ip6-send-fuzzer: Index-out-of-bounds in ot::RouterTable::Allocate

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5375666315853824 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type:...

openthread/radio-receive-done-fuzzer: Index-out-of-bounds in ot::RouterTable::UpdateAllocation

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5160541604544512 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

qpid-proton/fuzz-connection-driver: Index-out-of-bounds in pni_inspect_enter

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6237435934539776 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzerubsanqpid-proton Platform Id: linux Crash...

qpid-proton/fuzz-message-decode: Heap-buffer-overflow in pni_decoder_decode_value

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=5311329584807936 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-message-decode Fuzz target binary: fuzz-message-decode Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...

graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4846071615324160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

skia/skottie_json: Crash in rapidjson::internal::Pow10

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=4735000405606400 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100280ae1...

Microsoft Teams URL Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Teams. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Edge XML File Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the sandbox on vulnerable installations of Microsoft Edge. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists due to the fact that variou...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in sse2::store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6083875636772864 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in ClipPixelCacheNexus

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736248416141312 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_ept2_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4824424443281408 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept2fuzzer Fuzz target binary: encoderept2fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

tor/oss-fuzz-extrainfo: Use-of-uninitialized-value in RC4_set_key

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=5079466983292928 Project: tor Fuzzer: libFuzzertoross-fuzz-extrainfo Fuzz target binary: oss-fuzz-extrainfo Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick/ping_gif_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Detailed report: https://oss-fuzz.com/testcase?key=5727665058217984 Project: imagemagick Fuzzer: libFuzzerimagemagickpinggiffuzzer Fuzz target binary: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_has_lowbits

Detailed report: https://oss-fuzz.com/testcase?key=4909191931101184 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::Decompressor::consumeCompressedGnuHeader

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5767510275129344 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in Dot11DecryptScanForKeys

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5122206420959232 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

Easy Hosting Control Panel 0.37.12.b Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-MULTIPLE-CSRF.txt + ISR: Apparition Security Greetz: indoushka|Eduardo|Dirty0tis Vendor: ======== www.ehcp.net Product: ========= Easy Hosting Control Panel v0.37.12.b Ehcp...