Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53155)

ocfs2: uninitialized value in ocfs2filereaditer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504542; scriptversion"1.2";...

PT-2025-48288

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=461199967 Crash type: Use-of-uninitialized-value Crash state: QImage::pixel XCFImageFormat::copyGrayAToRGB XCFImageFormat::copyLayerToImage...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-53145)

um: potential integer overflow during physmem setup. This vulnerability happens when the real map size is greater than LONGMAX, which can be easily triggered on UML/i386. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

kimageformats:kimgio_jxl_fuzzer: Use-of-uninitialized-value in jxl::N_SCALAR::EPF1Stage::ProcessRow

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6238519678009344 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxlfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in QImage::pixelIndex

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5298014920179712 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

karchive:k7z_fuzzer: Use-of-uninitialized-value in K7Zip::openArchive

Detailed Report: https://oss-fuzz.com/testcase?key=6574051113107456 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: K7Zip::openArchive karchivefuzzer.cc...

kimageformats:kimgio_psd_fuzzer: Use-of-uninitialized-value in visitElement

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6432244647657472 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiopsdfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_hdr_fuzzer: Use-of-uninitialized-value in QtPrivate::startsWith

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6007493387157504 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiohdrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in ReadContainer

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4862015811420160 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

karchive:ktar_xz_fuzzer: Use-of-uninitialized-value in lzma_index_hash_decode

Detailed Report: https://oss-fuzz.com/testcase?key=4813479728185344 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarxzfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lzmaindexhashdecode streamdecode autodeco...

kimageformats:kimgio_psd_fuzzer: Use-of-uninitialized-value in PSDHandler::read

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4738025742729216 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiopsdfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2024-44664

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php...

PHPGurukul Online Shopping Portal has a security vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

karchive:k7z_fuzzer: Use-of-uninitialized-value in crc32_z

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5913949670539264 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc3...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in QImage::pixel

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5281479564525568 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

karchive:kzip_fuzzer: Use-of-uninitialized-value in inflate

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=4860655984508928 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: kzipfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

karchive:ktar_lz_fuzzer: Use-of-uninitialized-value in KTar::KTarPrivate::readRawHeader

Detailed Report: https://oss-fuzz.com/testcase?key=5368230320603136 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarlzfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: KTar::KTarPrivate::readRawHeader...

bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO

...

net: mctp: Don't access ifa_index when missing

...

Whose Narrative Is It Anyway? A KV Cache Manipulation Attack

The Key ValueKV cache is an important component for efficient inference in autoregressive Large Language Models LLMs, but its role as a representation of the model's internal state makes it a potential target for integrity attacks. This paper introduces "History Swapping," a novel block-level...