DBeaver parseDocument XXE

The vulnerability of the parseDocument function of the cross-platform tool for working with DBeaver databases is related to an error in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

Denial Of Service (DoS)

yaml is vulnerable to Denial of Service DoS attacks. According to the documentation, the parseDocument and parseAllDocuments functions should never raise an exception. However, an exception that comes from the prettifyError function is thrown when these functions are given erroneous input that...

Uncaught exception in document parsing functions

Description The parseDocument and parseAllDocuments functions should never throw according to the documentation. However, when these functions are fed an invalid input with a lot ≥80 of carriage return characters \r, an exception is thrown, which originates in the prettifyError function. Proof of...

Marcelo Roberto Jimenez’s security vulnerabilities

Marcelo Roberto Jimenez pupnp is an open source application by Marcelo Roberto Jimenez, a portable SDK for UPnP devices. pupnp 1.16.1 contains a security vulnerability that stems from a stack overflow that can cause a denial of service via the parseDocument function of the parser. A security...

libreoffice/lwpfuzzer: Heap-use-after-free in LwpFrib::GetRevisionType

Detailed report: https://oss-fuzz.com/testcase?key=5685654865313792 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6060000411b1 Crash State:...