lodepng:lodepng_fuzzer: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<unsigned char*>::__wrap_iter

Project: https://github.com/lvandeve/lodepng.git Detailed Report: https://oss-fuzz.com/testcase?key=5171113607954432 Project: lodepng Fuzzing Engine: afl Fuzz Target: lodepngfuzzer Job Type: aflasanlodepng Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

guetzli:guetzli_fuzzer: Dynamic-stack-buffer-overflow in std::__1::__bit_reference<std::__1::vector<bool, std::__1::allocator<bool> >, tr

Project: https://github.com/google/guetzli.git Detailed Report: https://oss-fuzz.com/testcase?key=5516239039496192 Project: guetzli Fuzzing Engine: afl Fuzz Target: guetzlifuzzer Job Type: aflasanguetzli Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

sql-parser:fuzz_sql_parse: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter

Project: https://github.com/hyrise/sql-parser.git Detailed Report: https://oss-fuzz.com/testcase?key=6653515308072960 Project: sql-parser Fuzzing Engine: afl Fuzz Target: fuzzsqlparse Job Type: aflasansql-parser Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

Print Spooler Remote DLL Injection

The print spooler service can be abused by an authenticated remote attacker to load a DLL through a crafted DCERPC request, resulting in remote code execution as NT AUTHORITY\SYSTEM. This module uses the MS-RPRN vector which requires the Print Spooler service to be running. Module Options msf use...

ImageMagick EncodeImage Buffer Overflow DoS

The vulnerability of the EncodeImage function in the coders/pict.c component of the console-based graphic editor ImageMagick involves reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially...

qsvghandler.cpp Qt DoS

The vulnerability of the qsvghandler.cpp component of the cross-platform framework for developing Qt software is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to trigger a service failure by using an altered SVG image...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress WP S...

libigl:igl_fuzzer: Use-of-uninitialized-value in std::__1::vector<int, std::__1::allocator<int> >::vector

Detailed Report: https://oss-fuzz.com/testcase?key=4872471177199616 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzermsanlibigl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::vector ::vector...

Cross site scripting

Kirby is a content management system. In Kirby CMS versions 3.5.5 and 3.5.6, the Panel's ListItem component used in the pages and files section for example displayed HTML in page titles as it is. This could be used for cross-site scripting XSS attacks. Malicious authenticated Panel users can...

CVE-2020-27361

An issue exists within Akkadian Provisioning Manager 4.50.02 which allows attackers to view sensitive information within the /pme subdirectories...

Keystone Engine security vulnerabilities

Keystone Engine is an assembler framework. A security vulnerability exists in Keystone Engine that stems from Keystone Engine having an invalid idle in llvmks::SmallVectorImpl::SmallVectorImpl...

ruby: HTTP response splitting in WEBrick

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients...

CVE-2021-31516

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2021-31516

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2021-31515

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2021-31515

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2021-31515

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 Build ID 88f343c3. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2021-31516

CVE-2021-31516 affects Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). The flaw is in BNDB file parsing where the code does not validate the existence of an object before performing operations, enabling a remote attacker to execute code in the current process. Exploitation requires user inte...