Sahi pro 8.x - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Sahi pro alertdocument.cookie”.start; log“testing stored XSS injection”; $tc1.end; Step 2 : Execute the created script poc.sah using sahi GUI controller . Step 3 : navigate to the web logs console http://:/logs using the...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Crash in extract_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5080476840099840 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Addres...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in heif_image_release

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5636585850142720 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_ALS_fuzzer: Heap-buffer-overflow in read_var_block_data

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5184853437317120 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDALSfuzzer Fuzz target binary: ffmpegAVCODECIDALSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5638446846050304 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_M101_fuzzer: Heap-buffer-overflow in m101_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5728999453491200 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDM101fuzzer Fuzz target binary: ffmpegAVCODECIDM101fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Crash in oggvorbis_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5764908467093504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN...

imagemagick/ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::get2

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5755410549571584 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip: Heap-buffer-overflow in asn1_get_real

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5683872097894400 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

opencv/imread_fuzzer: Use-of-uninitialized-value in cv::ExrDecoder::readData

Detailed report: https://oss-fuzz.com/testcase?key=5744080958521344 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::ExrDecoder::readData...

wireshark/fuzzshark_ip_proto-udp: Heap-use-after-free in wmem_array_get_count

Detailed report: https://oss-fuzz.com/testcase?key=5757525804187648 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60b00046ab78 Crash State:...

cryptofuzz/cryptofuzz-openssl-110-noasm: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5713279621529600 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-110-noasm Fuzz target binary: cryptofuzz-openssl-110-noasm Job Type: libfuzzermsancryptofuzz Platform Id:...

cryptofuzz/cryptofuzz-openssl-102-noasm: Use-of-uninitialized-value in aes_ccm_ctrl

Detailed report: https://oss-fuzz.com/testcase?key=5638807069655040 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-102-noasm Fuzz target binary: cryptofuzz-openssl-102-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

cryptofuzz/cryptofuzz-openssl-102-noasm: Heap-buffer-overflow in RC4

Detailed report: https://oss-fuzz.com/testcase?key=5695841819426816 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-102-noasm Fuzz target binary: cryptofuzz-openssl-102-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

hostap/ap-mgmt-fuzzer: Crash in copy_supp_rates

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737950014341120 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in ap_free_sta

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5713840416751616 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in hostapd_is_dfs_required

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5666753884979200 Project: hostap Fuzzer: aflhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f6600000018 Crash...

radare2/ia_fuzz: Heap-buffer-overflow in load

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5749546694475776 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

envoy/h1_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5756178220449792 Project: envoy Fuzzer: libFuzzerenvoyh1capturedirectresponsefuzztest Fuzz target binary: h1capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f55425a59b0 Crash...

karchive/karchive_fuzzer: Heap-buffer-overflow in inflate_fast

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5726433327972352 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...