secret-regex-list

Lista de expresiones regulares para secretos Lista de regex para extraer claves de API secretas e información jugosa. Puedes copiarla directamente y ponerla en tu código de Python; algunas regex pueden requerir tres comillas o se romperá el código. "Cloudinary" : "cloudinary://.", "Firebase URL":...

shiro-cve-2022-32532

Entorno de reproducción de Apache Shiro CVE-2022-32532 Esta es una aplicación web mínima para reproducir el CVE-2022-32532 bypass de autenticación de Apache Shiro RegExPatternMatcher. Descripción de la vulnerabilidad CVE : CVE-2022-32532 Versiones afectadas : Shiro 1.9.1 Causa : RegExPatternMatch...

mkpath

mkpath Crea combinaciones de rutas de URL usando una lista de palabras Lee un archivo de lista de palabras y genera combinaciones de rutas para un dominio o una lista de dominios. La entrada del archivo de lista de palabras se convierte a minúsculas y se procesan las palabras únicas. Además, la...

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 Se descubrió que Void Tools Everything anterior a v1.4.1.1022 contiene una Denegación de Servicio por Expresión Regular ReDoS corregido en Everything 1.5 alpha Descripción sugerida Se descubrió que Void Tools Everything anterior a v1.4.1.1022 contiene una Denegación ...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

CVE-2024-27198-TeamCity

Mitigation methods: regexp on WAF REQUESTURI Regex ^\S\?jsp=\S;\.jsp...

CVE-2024-27088

CVE-2024-27088 취약점 개요 CVE-2024-27088 Feb 26, 2024 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently...

CVE-2026-31816

CVE-2026-31816 - Bypass de autenticación a RCE en Budibase CVE-2026-31816 es una vulnerabilidad crítica de bypass de autenticación y autorización que afecta a Budibase. La vulnerabilidad se encuentra en el middleware de autorización del lado del servidor responsable de proteger los endpoints de l...

CVE-2023-43646

CVE-2023-43646 Vulnerability Overview CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS in node.js package Part of the rebob project Vulnerability Description github advisories /\sfunction?:\s|\s/^?:/+/\s^\/+/ This vulnerability can be exploited when there is an imbalance in parentheses, which results...

CVE-2022-24713-POC

POC de CVE-2022-24713 en Ubuntu Instala el paquete rust-regex actual en Ubuntu. Después, clona este repositorio. A continuación, ejecuta cargo build. La dependencia de regex está configurada en la carpeta /usr/share/cargo/registry, por lo que no habrá problemas de dependencias. Si la compilación...

DEBIAN-CVE-2026-100698

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

EUVD-2026-87671

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

CVE-2026-100698 Adminer before 6.0.2 Privileged-Port SSRF via host_port Regex

Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the hostport function in adminer/include/functions.inc.php. The port capture group requires pure digits anchored to the end of the string, so any server value with a non-digit tail fails the regex and falls back to returni...

pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function

A flaw was found in the pacote component. A remote attacker can exploit this denial of service DoS vulnerability by providing a specially crafted input to the addGitSha function. This malicious input triggers excessive CPU consumption due to regex replacement and string manipulation, which can le...

bordair-detector

Bordair Detector Un detector de dos etapas para intentos de inyección de prompts y jailbreak en entradas de LLM. Una puerta de regex resuelve la gran mayoría del tráfico sin tocar el modelo; cualquier cosa ambigua pasa a un clasificador DeBERTa-v3 cuantizado que se ejecuta en ONNX. El mismo motor...

CVE-2026-83591

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization and output escaping. This makes it possible for...

Leaked-Credentials

Para buscar credenciales filtradas usando las Herramientas para Desarrolladores de Google Chrome y expresiones regulares, sigue estos breves pasos: 1. Abrir DevTools: En Chrome, navega al sitio que estás inspeccionando y luego abre las Herramientas para Desarrolladores con Ctrl+Shift+I...

CVE-2026-83591

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.1.16 . The root cause is insufficient input sanitization and output escaping during a Regex Transformation of comment content. Specifically, the ...

CVE-2026-83591 AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-86535

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization and output escaping. This makes it possible for...