imagemagick/encoder_psd_fuzzer: Negative-size-param in CopyMagickMemory

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5076161005617152 Project: imagemagick Fuzzer: aflimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

Command Execution Vulnerability in the set_param Program of the Pelco Sarix Pro Network Camera

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program not performing security checks on user-submitted parameters, allowing an attack to take full control of the...

ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

open62541: Negative-size-param in UA_SecureChannel_processChunk

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5797976103452672 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

WordPress WPHRM plugin <= 1.0 - Authenticated SQL Injection

WordPress WPHRM plugin Authenticated SQL Injection allows an attacker to inject SQL commands via the employeeid $GET param. Solution Update the plugin...

PT-2017-3367 · Zivif · Zivif Pr115-204-P-Rs

Name of the Vulnerable Software and Affected Versions: Zivif PR115-204-P-RS version V2.3.4.2103 Description: The issue is related to errors in handling registration data in the webcam's software. It allows a remote attacker to obtain user credentials using the HTTP request...

gdal: Negative-size-param in DDFSubfieldDefn::ExtractStringData

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5663860470054912 Project: gdal Fuzzer: libFuzzergdalogrsdtsfuzzer Fuzz target binary: ogrsdtsfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash...

llvm_libcxxabi: Negative-size-param in __cxxabiv1::NodeArray __cxxabiv1::Db::makeNodeArray<std::__1::__wrap_iter<__cxxa

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4630402486501376 Project: llvmlibcxxabi Fuzzer: libFuzzerllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: libfuzzerasanllvmlibcxxabi Platform Id: linux Crash Type:...

CVE-2017-11585

dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection...

CVE-2017-11585

CVE-2017-11585 affects dayrui FineCMS 5.0.9 with remote PHP code execution through the param parameter in an action=cache request to libraries/Template.php, described as Eval Injection. The vulnerability allows an attacker to inject and execute arbitrary PHP code on the server. Exploitation and e...

FineCms Remote Code Execution Vulnerability

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A remote code execution vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to execute arbitrary PHP code with the help of the 'param' function in th...

gdal: Negative-size-param in CheckCitationKeyForStatePlaneUTM

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5440880817209344 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

gdal: Negative-size-param in NTFRecord::GetField

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4813983888441344 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

Design/Logic Flaw

libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7...

CVE-2017-9196

CVE-2017-9196 affects AutoTrace 0.31.1 via the libautotrace.a library. The ReadImage function in input-tga.c at line 528:7 contains a negative-size-param vulnerability that is described as a heap/buffer issue. Public sources (CNVD and related analyses) indicate this flaw could allow an attacker t...

gdal: Memcpy-param-overlap in KML::unregisterLayerIfMatchingThisNode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5115360233652224 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

BanManager WebUI 1.5.8 - PHP Code Injection Vulnerability

Exploit for php platform in category web applications BanManager WebUI 1.5.8 - PHP Code Injection & Stored XSS Exploit Title: BanManager WebUI - PHP Code Injection & Stored XSS Date: 2017-05-10 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage:...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07450)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A cross-site scripting vulnerability exists in home/seos/courier/smtpgadd.html in Accellion FTA devices versions prior to FTA912180....

HackerOne: Subdomain takeover #3 at info.hacker.one

Summary: Hi team, looking the last fix released from unbounce team at https://hackerone.com/reports/209004 i've been able again to bypass it again and takeover the subdomain info.hacker.one with a new vulnerable PARAM at UnbouncePages App Actual Dns Entry: F172446 Steps To Reproduce & New PoC for...

llvm_libcxxabi: Negative-size-param in std::__1::char_traits<char>::copy

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6519608255184896 Project: llvmlibcxxabi Fuzzer: aflllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: aflasanllvmlibcxxabi Platform Id: linux Crash Type:...