OSV-2021-766 Negative-size-param in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34259 Crash type: Negative-size-param Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

Command injection in bestzip

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param...

CVE-2021-24239

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...

CITSmart ITSM 9.1.2.27 - (query) Time-based Blind SQL Injection (Authenticated) Vulnerability

Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.28 Vendor has...

U.S. Dept Of Defense: DOM Based XSS on https://████ via backURL param

Description: The following endpoint suffers from DOM Based XSS https://████████/██████=javascript:alertdocument.domain The ████████ param determines the content which will be displayed on the "Back to Search Result" button, eventually leading to RXSS. References ██████ Regards nagli Impact...

Health Center Patient Record Management System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Health Center Patient Record Management System | 'address' param Stored Cross Site Scripting Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/11058/health-center-patient-record-management-system.html Software Link:...

NewStart CGSL MAIN 6.02 : libtiff Vulnerability (NS-SA-2021-0058)

The remote NewStart CGSL host, running version MAIN 6.02, has libtiff packages installed that are affected by a vulnerability: - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow...

OSV-2021-366 Negative-size-param in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30748 Crash type: Negative-size-param Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-274 Memcpy-param-overlap in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30253 Crash type: Memcpy-param-overlap Crash state: framegetmetalayers blosc2frametoschunk fuzzdecompressframe.c...

OSV-2021-246 Memcpy-param-overlap in frame_get_usermeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29973 Crash type: Memcpy-param-overlap Crash state: framegetusermeta blosc2frametoschunk blosc2schunkopensframe...

PHPGurukul Daily Expense Tracker System 跨站脚本漏洞

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the add-expense.php Item parameter. No details of the vulnerability are available at this time...

OSV-2018-369 Negative-size-param in get_urls_css

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032 Crash type: Negative-size-param Crash state: geturlscss wgetcssfuzzer.c...

OSV-2017-78 Negative-size-param in UA_SecureChannel_processChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3609 Crash type: Negative-size-param Crash state: UASecureChannelprocessChunk processCompleteChunk UAConnectionprocessChunks...

VulnCheck KEV: CVE-2015-2208

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...

Cross-site Scripting (XSS)

symphonycms/symphony-2 is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script or HTML into the fields'body' param via events\event.publisharticle.php when a user visits the page...

CVE-2020-25343

Cross-site scripting XSS vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields'body' param via events\event.publisharticle.php...

CVE-2020-25343

Cross-site scripting XSS vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields'body' param via events\event.publisharticle.php...

CVE-2020-7741

This affects the package hellojs before 1.18.6. The code get the param oauthredirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauthredirect, such as javascript:alert1...

U.S. Dept Of Defense: param allows any external resource to be downloadable | https://████████

Description: The following param allows an attacker to trick people into downloading malicious files, scripts and other payloads. https://██████████?url=https:// PoC 1. I will show you how the page looks normally without any changes. If you directly access https://███ you will be shown the...

arrow:parquet-arrow-fuzz: Negative-size-param in CopyUncompressedBlockToOutput

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4914963406389248 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: parquet-arrow-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...