CVE-2018-13206

The sell function of a smart contract implementation for ProvidenceCasino PVE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Memory Corruption Vulnerability in NAPro

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...

Memory Corruption Vulnerability in NA-VIEW

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...

GZS Token Integer Overflow Vulnerability

GZS Token GZS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in GZS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

AzurionToken Integer Overflow Vulnerability

AzurionToken AZU is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in AZU. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed report: https://oss-fuzz.com/testcase?key=5101942668787712 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Error: Backup proxy is missing C++ runtime components

Article Applicability The error message states that the C++ runtime components are missing, which may be inaccurate. The actual cause of the error is that the VDDK libraries cannot be loaded, which in older versions of Veeam Backup & Replication 9.5 and older was caused by missing C++ runtimes...

Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events

ARCHIVED STORY Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events By John Fokker · July 03, 2018 Every four years, everyone’s head around the globe turns toward the television. The Olympics, the World Cup – world events like these have all eyes viewing friendly competition...

librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffIFD::TiffIFD

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5961764976984064 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in update_pub_insn

Detailed report: https://oss-fuzz.com/testcase?key=5956930588639232 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: updatepubinsn...

poppler/pdf_fuzzer: Use-of-uninitialized-value in Function::getOutputSize

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5196335299952640 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

skia/api_draw_functions: Use-of-uninitialized-value in sse2::store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5682031139749888 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/coder_JPEG_fuzzer: Use-of-uninitialized-value in ReadJPEGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6507454866128896 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderJPEGfuzzer Fuzz target binary: coderJPEGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

CVE-2018-1000536

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

Cross site scripting

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

poppler/pdf_fuzzer: Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5105892214177792 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

[SECURITY] Fedora 28 Update: redis-4.0.10-1.fc28

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkDashPath::InternalFilter

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6012834017181696 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

QEMU Guest Agent 2.12.50 - Denial of Service

QEMU Guest Agent 2.12.50 - Denial of Service Exploit Title: QEMU Guest Agent 2.12.50 - Denial of Service Date: 2018-06-07 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.qemu.org/ Software Link: https://www.qemu.org/download/ Version: 2.12.50 and earlier Tested on: 2.12.50...

qcms/fuzz: Use-of-uninitialized-value in clamp_float

Detailed report: https://oss-fuzz.com/testcase?key=5718259826425856 Project: qcms Fuzzer: libFuzzerqcmsfuzz Fuzz target binary: fuzz Job Type: libfuzzermsanqcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clampfloat qcmstransformmodulematrix...