6411 matches found
wpantund:wpantund-fuzz: Stack-use-after-scope in std::__1::__tree_const_iterator<std::__1::__value_type<std::__1::basic_string<ch
Detailed Report: https://oss-fuzz.com/testcase?key=5683462437732352 Project: wpantund Fuzzing Engine: afl Fuzz Target: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffd739e8b60 Crash State: std::1::treeconstiterator, std::1...
libfdk-aac:aacDecoder_DecodeFrame: Stack-use-after-scope in isResetNeeded
Detailed Report: https://oss-fuzz.com/testcase?key=4711256102666240 Project: libfdk-aac Fuzzing Engine: afl Fuzz Target: aacDecoderDecodeFrame Job Type: aflasanlibfdk-aac Platform Id: linux Crash Type: Stack-use-after-scope READ Crash Address: 0x7ffd08489cc0 Crash State: isResetNeeded...
ots:ots-fuzzer: Stack-use-after-scope in std::__1::__tree_const_iterator<std::__1::__value_type<unsigned int, ots::Table*
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5123437222821888 Project: ots Fuzzing Engine: afl Fuzz Target: ots-fuzzer Job Type: aflasanots Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffdd2cd5ca0 Crash State:...
picotls:fuzz-client-hello: Stack-use-after-scope in derive_secret_with_hash
Project: https://github.com/h2o/picotls.git Detailed Report: https://oss-fuzz.com/testcase?key=6025632696893440 Project: picotls Fuzzing Engine: afl Fuzz Target: fuzz-client-hello Job Type: aflasanpicotls Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffe54445f00...
kimageformats:kimgio_pcx_fuzzer: Stack-use-after-scope in QByteRef::QByteRef
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5486083000369152 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiopcxfuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...
xpdf:fuzz_pdfload: Stack-use-after-scope in GString::appendfv
Detailed Report: https://oss-fuzz.com/testcase?key=5095773137141760 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Stack-use-after-scope READ 4 Crash Address: 0x7ffe2e51a200 Crash State: GString::appendfv GString::appendf...
sleuthkit:sleuthkit_fls_fat_fuzzer: Stack-use-after-scope in std::__1::__tuple_leaf<0ul, unsigned long const&, false>::__tuple_leaf<unsigned
Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6520166639861760 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsfatfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...
rapidjson:fuzzer: Stack-use-after-scope in rapidjson::internal::DiyFp::DiyFp
Project: https://github.com/Tencent/rapidjson.git Detailed Report: https://oss-fuzz.com/testcase?key=4576916593049600 Project: rapidjson Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanrapidjson Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffdc64aa540...
Incorrect Authorization in ORY Oathkeeper
ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope foo using an access token granted with that foo scope, introspection will be valid and that...
Insecure Token Bypass
github.com/ory/oathkeeper has Insecure Token Bypass. An attacker is able to exploit the vulnerability by making a request to an endpoint that requires the scope foo, using an access token granted with that foo scope, introspection will be valid and that token will be cached and the following...
CVE-2021-32701
ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope foo using an access token granted with that foo scope, introspection will be valid and that...
Design/Logic Flaw
ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope foo using an access token granted with that foo scope, introspection will be valid and that...
CVE-2021-32701
ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope foo using an access token granted with that foo scope, introspection will be valid and that...
CVE-2021-32701
ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. When you make a request to an endpoint that requires the scope foo using an access token granted with that foo scope, introspection will be valid and that...
PT-2021-19867 · Ory · Ory Oathkeeper
Name of the Vulnerable Software and Affected Versions: ORY Oathkeeper versions prior to v0.38.12-beta.1 Description: The issue arises when a request is made to an endpoint requiring a specific scope, and the access token is granted with that scope, making introspection valid and caching the token...
CVE-2021-3603
PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called if such code is injected into the host project's scope by other means. If the $patternselect parameter to validateAddress is set to 'php' the default, defined by PHPMailer::$validator, and the globa...
HackerOne: Private program disclosure through notifications
Hello Team, Summary: I recently came across hackerone report: https://hackerone.com/reports/1179241 . I though this was fixed but today I have have faced similar experience. I have received a Scope and policy update from the program "██████" which I am not part of. ████████ When I was clicking on...
CVE-2020-23313
There is an Assertion 'scopestackp contextp-scopestackp' failed at js-scanner-util.c:2510 in scannerliteraliscreated in JerryScript 2.2.0...
Design/Logic Flaw
There is an Assertion 'scopestackp contextp-scopestackp' failed at js-scanner-util.c:2510 in scannerliteraliscreated in JerryScript 2.2.0...
CVE-2020-23313
CVE-2020-23313 affects JerryScript 2.2.0. The vulnerability is an assertion failure: scope_stack_p > context_p->scope_stack_p in js-scanner-util.c:2510 (function scanner_literal_is_created). Public details are limited across the provided documents; available metrics from NVD show CVSSv3.1 b...