WordPress SEMA API plugin < 4.02 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress SEMA API plugin versions 4.02. Solution Update the WordPress SEMA API plugin to the latest available version at least 4.02...

SEMA API < 4.02 - Unauthenticated SQLi

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users PoC v 3.64: curl http://example.com/wp-admin/admin-ajax.php --data 'action=getsemadata=attributes=-3 UNION ALL...

SEMA API < 4.02 - Unauthenticated SQLi

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users v 3.64: curl http://example.com/wp-admin/admin-ajax.php --data 'action=getsemadata&type=attributes&catid=-3 UNION...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::PushDeclContext

Detailed Report: https://oss-fuzz.com/testcase?key=5760004104388608 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PushDeclContext...

OSV-2020-1522 Segv on unknown address in clang::Sema::EnterDeclaratorContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20232 Crash type: Segv on unknown address Crash state: clang::Sema::EnterDeclaratorContext clang::Sema::ActOnCXXEnterDeclaratorScope clang::Parser::ParseDirectDeclarator...

OSV-2020-1469 Segv on unknown address in clang::Sema::ActOnTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19182 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnTag clang::Parser::ParseEnumSpecifier clang::Parser::ParseDeclarationSpecifiers...

OSV-2020-1459 Segv on unknown address in clang::Sema::LookupQualifiedName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19181 Crash type: Segv on unknown address Crash state: clang::Sema::LookupQualifiedName clang::Sema::CppLookupName clang::Sema::LookupName...

OSV-2020-1446 Segv on unknown address in clang::Sema::CreateOverloadedBinOp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19567 Crash type: Segv on unknown address Crash state: clang::Sema::CreateOverloadedBinOp BuildOverloadedBinOp clang::Sema::BuildBinOp...

OSV-2020-1443 Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20420 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnCapScopeReturnStmt clang::Sema::BuildReturnStmt clang::Sema::ActOnReturnStmt...

OSV-2020-1408 Segv on unknown address in clang::Sema::LookupTemplateName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21152 Crash type: Segv on unknown address Crash state: clang::Sema::LookupTemplateName clang::Sema::isTemplateName clang::Parser::ParseOptionalCXXScopeSpecifier...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::DeclareImplicitCopyAssignment

Detailed Report: https://oss-fuzz.com/testcase?key=5957130015473664 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::DeclareImplicitCopyAssignment...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::SetCtorInitializers

Detailed Report: https://oss-fuzz.com/testcase?key=5789742166966272 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::SetCtorInitializers...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::LookupTemplateName

Detailed Report: https://oss-fuzz.com/testcase?key=5637110368567296 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::LookupTemplateName...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::EnterDeclaratorContext

Detailed Report: https://oss-fuzz.com/testcase?key=6244001741275136 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::EnterDeclaratorContext...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::DeclareImplicitCopyConstructor

Detailed Report: https://oss-fuzz.com/testcase?key=5719523747692544 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::DeclareImplicitCopyConstructor void...

llvm:clang-fuzzer: Segv on unknown address in clang::LookupResult::sanity

Detailed Report: https://oss-fuzz.com/testcase?key=4872329519955968 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::LookupResult::sanity...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnStartOfFunctionDef

Detailed Report: https://oss-fuzz.com/testcase?key=5729474851373056 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnStartOfFunctionDef...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Sema::ActOnMethodDeclaration

Detailed Report: https://oss-fuzz.com/testcase?key=5759960881561600 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnMethodDeclaration...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnTag

Detailed Report: https://oss-fuzz.com/testcase?key=5715582179868672 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnTag...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::LookupQualifiedName

Detailed Report: https://oss-fuzz.com/testcase?key=5702033537761280 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::LookupQualifiedName...