gdal/gdal_vector_translate_fuzzer: Heap-buffer-overflow in _escapeString_GCIO

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5667643664105472 Project: gdal Fuzzer: aflgdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

gdal/gdal_vector_translate_fuzzer: Heap-buffer-overflow in SHPCreateLL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4684654431961088 Project: gdal Fuzzer: aflgdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

openSUSE Security Update : translate-toolkit (openSUSE-2018-130)

This update for translate-toolkit to 2.2.4 fixes several issues. This security issue was fixed : - Prevent inclusion of external ressources XXE boo1073535 These non-security issues were fixed : - Added support for nested and WebExtension JSON dialects. - po2txt no longer converts non-translatable...

Scarab ransomware: new variant changes tactics

The Scarab ransomware was discovered in June 2017. Since then, several variants have been created and discovered in the wild. The most popular or widespread versions were distributed via the Necurs botnet and initially written in Visual C compiled. However, after unpacking, we've found that anoth...

XML External Entities (XXE)

translate-toolkit is vulnerable to XML External Entity XXE attacks. The vulnerability exists due to the use of insecure defaults where external entities were resolved. This allows arbitrary file reads when processing malicious XML files...

translate-tattoo.ru XSS vulnerability

Open Bug Bounty ID: OBB-446214 Description| Value ---|--- Affected Website:| translate-tattoo.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

x86: Incorrect handling of self-linear shadow mappings with translated guests

ISSUE DESCRIPTION The shadow pagetable code uses linear mappings to inspect and modify the shadow pagetables. A linear mapping which points back to itself is known as self-linear. For translated guests, the shadow linear mappings being in a separate address space are not intended to be self-linea...

WordPress My WP Translate plugin <=1.0.3 - Authenticated Option Deletion Vulnerability

WordPress My WP Translate plugin Authenticated Option Deletion Vulnerability was found in 1.0.3 version and exists in the function ajaxmtswptremoveplugin accessible through WordPress AJAX functionality to users who are logged in. Solution Update the plugin...

My WP Translate < 1.0.4 - CSRF & XSS

The My WP Translate WordPress plugin was affected by a CSRF & XSS security vulnerability...

Google Translate - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Google Translate published at the 'play' market has multiple vulnerabilities...

CHICKEN Denial of Service Vulnerability

CHICKEN is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A security vulnerability exists in the string-translate procedure in the data structure unit in versions of CHICKEN prior to 4.10.0. A remote attacker...

UBUNTU-CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

DEBIAN-CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2015-4556

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

CVE-2015-4556: Improper Input Validation

The string-translate procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service crash...

Unrestricted SQL Injection Vulnerability in Frontend of iWebSNS Enterprise Social Networking Platform

iWebSNS is a set of open source SNS social networking software built on LAMP development. iWebSNS enterprise social networking platform front-end there are unlimited SQL injection vulnerabilities. As the source code servtools\menupop\translatepri.php tname, vid and tem variables failed to strictl...

PT-2017-4109 · Qemu +1 · Qemu +1

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 2.9.0 Description: The issue is related to the disas insn function in target/i386/translate.c of the QEMU emulator, which does not limit the instruction size when TCG mode without hardware acceleration is used. This...