894 matches found
PT-2019-2513
Name of the Vulnerable Software and Affected Versions FortiOS versions 5.2.0 through 5.6.10 FortiOS versions 6.0.0 through 6.0.4 Description A reflected Cross-Site-Scripting XSS issue in the SSL VPN web portal is related to the failure to sanitize input. This may allow an attacker to execute...
radare2/ia_fuzz: Negative-size-param in r_buf_read
Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5700334476853248 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...
PT-2019-19265
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue was found in the Administration zone of the software, specifically in the /netflow/jspui/selectDevice.jsp file. This issue involves XSS that exists in...
CVE-2019-8929: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype...
radare2/ia_fuzz: Negative-size-param in r_buf_read
Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5669094898008064 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...
U.S. Dept Of Defense: MSSQL injection via param Customwho in https://█████/News/Transcripts/Search/Sort/ and WAF bypass
Summary: MSSQL injection via param Customwho in https://███████/News/Transcripts/Search/Sort/ Description: MSSQL injection via param Customwho in https://██████████/News/Transcripts/Search/Sort/ There is WAF, but we can make bypass and via global variable @@LANGID we can know that the base is use...
ZEIT: [Fix Bypass #541631] Open redirect on Signup
Some signup and login paths did not verify the ?next= query param properly and allowed an open redirect with a carefully crafted invalid URL. It is standard practise to use a redirect query param in login and signup endpoints but the value should be carefully validated before accepting to redirec...
PT-2020-9417
Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.6.1 Description: The issue is related to a lack of sanitization around error messages, leading to multiple Reflective XSS issues. These issues exist in various PHP files, including webservices/export.php,...
kimageformats/kimgio_fuzzer: Negative-size-param in QImage::fill
Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5118681342803968 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Crash...
opencv/imdecode_fuzzer: Negative-size-param in _TIFFmemcpy
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5766572742803456 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...
libheif/file-fuzzer: Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit
Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5732616832024576 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Negative-size-param Crash...
CVE-2019-9615
An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...
PT-2019-18658
Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505 Description An issue was discovered that allows time-based SQL Injection. The /index.php?m=public&a=checkemail URI is vulnerable via the param array parameter in the web/Lib/Action/PublicAction.class.php file...
openthread/cli-uart-received-fuzzer: Memcpy-param-overlap in ot::Cli::CoapSecure::Process
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5745974335504384 Project: openthread Fuzzer: aflopenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...
WS-2019-0568
OpenThread before 2019-11-13 is vulnerable to memcpy-param-overlap in ot::Cli::CoapSecure::Process...
U.S. Dept Of Defense: [███] SQL injection & Reflected XSS
SQL injection test 1. Go to site ███████ 2. Intercept this request POST /viewem6.php HTTP/1.1 Host: ████ User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due to an issue with capturing the name of a function expression in one of the param scope functions where the name symbols are not added to the body. This allows a remote attacker to execute arbitrary code in the context of the...
ghostscript: shading_param incomplete type checking (699660)
It was discovered that the ghostscript .shfill operator did not properly validate certain types. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript docume...
openSUSE Security Update : haproxy (openSUSE-2018-1229)
This update for haproxy to version 1.8.14 fixes the following issues : These security issues were fixed : - CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an out-of-bounds read in hpackvalididx that resulted in a remote crash and denial of service bsc1108683 -...