Ruby on Rails: HostAuthorization middleware does not suitably sanitize the Host / X-Forwarded-For header allowing redirection.

When a site is configured to use the .tkte.ch leading dot short form for domain name, ex: ruby config.hosts You are being redirected. Where the controller is simply: ruby class RedirectController ApplicationController def main redirectto action: 'main' end end The host header poisoning was report...

serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Atlassian Fisheye Crucible Denial of Service Vulnerability

Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A denial of service vulnerability exists in Atlassian Fisheye/Crucible, which can be exploited by an...

CVE-2020-14190

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4...

CVE-2020-14190

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4...

Code injection

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4...

CVE-2020-14190

CVE-2020-14190 affects Atlassian Fisheye/Crucible where a user-supplied regex in EyeQL can cause a Regex Denial of Service. Affected versions are before 4.8.4. Fixed in 4.8.4 and also in 4.9.0. The issue is triggered by an attacker-supplied regex in EyeQL that leads to DoS; no exploitation detail...

CVE-2020-14190

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4...

PT-2020-6902

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye/Crucible versions prior to 4.8.4 Description The issue is related to a Regex Denial of Service in EyeQL, where remote attackers can achieve this via user-supplied regex. This can lead to an uncontrolled consumption of...

CVE-2020-14190: Uncontrolled Resource Consumption

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4...

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

Code injection

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

CVE-2020-28360

CVE-2020-28360 describes an SSRF vulnerability in the npm package private-ip (versions 1.0.5 and earlier). The root cause is an insufficient RegEx filter for reserved IP ranges, allowing an attacker to craft requests to ARIN/other reserved ranges, which can lead to remote server-side resource req...

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

PT-2020-16994

Name of the Vulnerable Software and Affected Versions private-ip npm package versions 1.0.5 and below Description The issue is related to insufficient RegEx filtering in the private-ip npm package, which results in indeterminate Server-Side Request Forgery SSRF. This allows remote attackers to...

Scratch Addons Cross-Site Scripting Vulnerability

Scratch Addons is a plugin from the Scratch Addons community for providing theme changing functionality for browsers. The addon supports Chrome and Firefox browsers. A cross-site scripting vulnerability exists in Scratch Addons, which stems from the use of incorrect regular expressions, which can...

PT-2020-16367

Name of the Vulnerable Software and Affected Versions Scratch Addons versions prior to 1.3.2 Description The issue is related to a DOM-based XSS vulnerability. When a victim visits a specific website, the More Links addon of the Scratch Addons extension incorrectly uses a regular expression,...

fabric8-analytics-lsp-server (0.3.0), graphql-validated-types (>=2.7.0, <=2.11.0) +1 more potentially affected by unknown CVE via semver-regex (>=3.0.0, <=3.1.1)

semver-regex NPM version =3.0.0, =2.7.0, =1.2.0, =1.2.3 Source cves: unknown CVE Source advisory: SNYK:JS-SEMVERREGEX-1047770...

librdkafka:fuzz_regex: Index-out-of-bounds in parseatom

Project: https://github.com/edenhill/librdkafka.git Detailed Report: https://oss-fuzz.com/testcase?key=5948556745375744 Project: librdkafka Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerubsanlibrdkafka Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...