upb-any-recursion-audit

upb Any-recursion audit Ruby / PHP / C bindings Status: Complete. Six recursion-guard checks across three independent implementations Ruby/PHP shared upb core, C's separate managed implementation, all falsified except the one already-public, already-patched Python CVE this audit was checking...

upb:file_descriptor_parsenew_fuzzer: Use-of-uninitialized-value in _upb_FieldDef_Resolve

Detailed Report: https://oss-fuzz.com/testcase?key=6033855402606592 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzermsanupb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: upbFieldDefResolve upbFileDefCreate...

upb:file_descriptor_parsenew_fuzzer: Use-of-uninitialized-value in upb_MiniTable_BuildExtension

Detailed Report: https://oss-fuzz.com/testcase?key=4911141927387136 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzermsanupb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: upbMiniTableBuildExtension...

upb:file_descriptor_parsenew_fuzzer: Segv on unknown address in upb_MiniTable_SetSubEnum

Detailed Report: https://oss-fuzz.com/testcase?key=5622794184687616 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerasanupb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: upbMiniTableSetSubEnum...

upb:file_descriptor_parsenew_fuzzer: Use-of-uninitialized-value in _upb_FieldDef_Resolve

Detailed Report: https://oss-fuzz.com/testcase?key=5146321786372096 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzermsanupb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: upbFieldDefResolve upbFileDefCreate...

PT-2022-36990

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a bad-cast to const upb tabent also known as const struct upb tabent. This occurs during the execution of the upb...

upb:file_descriptor_parsenew_fuzzer: Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert in upb_strtable_insert

Detailed Report: https://oss-fuzz.com/testcase?key=5143351520788480 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000006cd5018 Crash State: Bad-cast to const upbtabent' aka 'con...

upb:file_descriptor_parsenew_fuzzer: Heap-buffer-overflow in upb_strtable_insert

Detailed Report: https://oss-fuzz.com/testcase?key=6720000548798464 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerasanupb Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d000000970 Crash State: upbstrtableinsert...

upb:file_descriptor_parsenew_fuzzer: Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert in upb_strtable_insert

Detailed Report: https://oss-fuzz.com/testcase?key=6728071547322368 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00079ecd5168 Crash State: Bad-cast to const upbtabent' aka 'con...

upb:file_descriptor_parsenew_fuzzer: Crash in upb_strtable_next2

Detailed Report: https://oss-fuzz.com/testcase?key=6067008199852032 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100000001 Crash State: upbstrtablenext2 removefiledef...

upb:file_descriptor_parsenew_fuzzer: Use-of-uninitialized-value in resolve_fielddef

Detailed Report: https://oss-fuzz.com/testcase?key=5010696608284672 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzermsanupb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: resolvefielddef upbDefPoolAddFile...

upb:file_descriptor_parsenew_fuzzer: Bad-cast to upb_OneofDef' (aka 'struct upb_OneofDef')create_fielddef in create_msgdef

Detailed Report: https://oss-fuzz.com/testcase?key=4733587960758272 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: Bad-cast Crash Address: 0xffffffe126cd9680 Crash State: Bad-cast to upbOneofDef' aka...

CVE-2008-6727

CVE-2008-6727 describes a cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) versions up to 2.x, specifically 2.2.2 and 2.2.1 (and earlier 2.x). The issue arises from accepting the User-Agent HTTP header without proper sanitization, enabling a remote attacker to inject arbitrary...

CVE-2002-2322

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2002-2322

CVE-2002-2322 affects Ultimate PHP Board (UPB) 1.0b, where the users.dat data file is stored under the web root with insufficient access control. This exposes usernames and passwords to remote attackers via the exposed file. The vulnerability is caused by improper access control rather than code ...

CVE-2002-2322: Improper Input Validation

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 exposes a path disclosure: a direct request to add.php allows remote attackers to view the physical path of the message board via the error message. This is a remote information-disclosure vulnerability (CVE-2002-2276). Exploitation details are described across multip...

CVE-2002-2276: Exposure of Sensitive Information to an Unauthorized Actor

Ultimate PHP Board UPB 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message...

CVE-2006-7169

PHP remote file inclusion vulnerability in includes/headersimple.php in Ultimate PHP Board UPB 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGskindir parameter...

CVE-2006-7169

CVE-2006-7169 describes a PHP remote file inclusion in Ultimate PHP Board (UPB) 2.0 and earlier . The vulnerability affects the file includes/header_simple.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the _CONFIG[skin_dir] parameter. Public references indica...