ffmpeg: Heap-buffer-overflow in y41p_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4569970002362368 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDY41Pfuzzer Fuzz target binary: ffmpegAVCODECIDY41Pfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Heap-buffer-overflow in decode_subband_slice_buffered

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6108700873850880 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

ffmpeg: Heap-buffer-overflow in y216_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6361794975105024 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDTARGAY216fuzzer Fuzz target binary: ffmpegAVCODECIDTARGAY216fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in ff_htmlmarkup_to_ass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5520132195483648 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSAMIfuzzer Fuzz target binary: ffmpegAVCODECIDSAMIfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Index-out-of-bounds in read_sbr_grid

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5370707196248064 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

WordPress WebDorado Gallery 1.3.29 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011 Software...

ffmpeg: Index-out-of-bounds in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5212314171080704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

dlplibs: Crash in librevenge::IStorage::load

Detailed report: https://oss-fuzz.com/testcase?key=5488429968130048 Project: dlplibs Fuzzer: afldlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619800000f78 Crash State: librevenge::IStorage::load...

Zomato Bug Bounty - Account Take Over Vulnerability

Document Title: =============== Zomato Bug Bounty - Account Take Over Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2063 Video: https://www.youtube.com/watch?v=2326m6ddthg Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID:...

Zenario 7.6 Cross Site Scripting

Document Title: =============== Zenario v7.6 - Delete Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2042 Release Date: ============= 2017-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Zomato Bug Bounty - Account Take Over Vulnerability

Document Title: =============== Zomato Bug Bounty - Account Take Over Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2063 Video: https://www.youtube.com/watch?v=2326m6ddthg Release Date: ============= 2017-05-02 Vulnerability Laboratory ID VL-ID:...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6321875116359680 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000001c0 Cra...

NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us

Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...

Medium: util-linux

Issue Overview: Sending SIGKILL to other processes with root privileges via su: A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.CVE-2017-26...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4658680639258624 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000dc1 Cra...

Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-26 Vulnerability Laboratory ID VL-ID: ==================================...

Weblate: CSRF - Changing the full name / adding a secondary email identity of an account via a GET request

SUMMARY ---------- Hello, I have found a CSRF request via the activation email that will change the full name of the targeted account. This vulnerability exists if the attacker registers a new account and then gives his activation link to someone else. If the victim uses the received activation...

wireshark: Heap-buffer-overflow in print_address_prefix_buf

Detailed report: https://oss-fuzz.com/testcase?key=5180630432219136 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000046d7 Crash State:...

wireshark: Heap-buffer-overflow in OALMarshal_UncompressValue

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5900099865542656 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5638972833267712 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-bootp Fuzz target binary: fuzzsharkudpport-bootp Job Type:...