Read the researcher's report on HackerOne
No analysis of this report yet. What HackerOne publishes about it is below, with the link to the report. Ask for a correction or removal.
| Report | Access | Whose object | Boundary crossed |
|---|---|---|---|
| Race Conditions in Popular reports feature. | A user account | No object involved | Vote-integrity boundary: one account increased the same report’s counter with concurrent votes. |
| Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe) | A user account | The attacker's own | A supplied model file is parsed by the game client, crossing from untrusted asset data into engine memory handling. |
| Type Confusion Vulnerability - SOAP / make_http_soap_request() | Not clear from the report | No object involved | Unknown; the supplied report does not describe a boundary crossing. |
| Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412) | Not clear from the report | No object involved | No application security boundary is described; the report concerns memory safety in a PHP database driver. |
| puttygen: 160MB memory leak while trying to extract openssh public key from crafted key file | A user account | No object involved | A crafted local key file triggered excessive memory allocation and leakage during parsing. |
| [MK8DX] Improper ranking/replay file parsing | Not clear from the report | No object involved | Unvalidated ranking or replay data reaches the game's parser. |
| Double free vulnerability in Flash Player Settings Manager (CVE-2015-0346) | Not clear from the report | No object involved | Not specified; the report describes memory corruption, not an access-control boundary. |
| 💥💥Crash report -Cloudflare WARP doesn't verify text length in "Excluded Host" name input data💥💥 | A user account | The attacker's own | A local configuration input caused the user's client to become unavailable. |
| ZeroMQ libzmq remote code execution | No account | No object involved | Network input crossed into memory handling in the target process. |
| select_colors write out-of-bounds | A user account | No object involved | The image-processing code wrote beyond its allocated color buffer. |
| Crash: Overwriting NoMethodError with a builtin class crashes/corrupts memory | A user account | No object involved | Untrusted interpreter code caused a crash in the interpreter process. |
| [avito.ru] ImageMagick uninitialized image palette | A user account | The attacker's own | An uploaded image caused server-side image processing to disclose fragments of server memory. |