OctoBot 代码问题漏洞

OctoBot is a powerful and fully modular open source cryptocurrency trading bot from the OctoBot community. A security vulnerability exists in OctoBot Tentacle versions 0.4.0beta3 through 0.4.3, which stems from a security flaw in the Tentacle Upload feature...

CVE-2022-31100

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a string literal or after a backslash, because rulex tries to...

CVE-2022-31099

CVE-2022-31099 affects the rulex regular expression language. The vulnerability is a stack overflow when parsing untrusted rulex expressions with deep nesting, potentially causing Denial of Service and service unavailability. The issue is mitigated by upgrading to version 0.4.3, which contains th...

CVE-2022-31100 Reachable Assertion in rulex

rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a string literal or after a backslash, because rulex tries to...

rulex 安全漏洞

rulex is a new, portable regular expression language open-sourced by rulex. A security vulnerability exists in rulex versions prior to 0.4.3, which stems from a possible stack overflow when parsing untrusted rulex expressions, potentially leading to a denial of service attack...

GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint

Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...

[SECURITY] Fedora 34 Update: rust-askalono-cli-0.4.3-5.fc34

Tool to detect the contents of license files...

Halo cross-site scripting vulnerability (CNVD-2021-50933)

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 suffers from a cross-site scripting vulnerability that can be exploited by attackers via CommentAuthorUrl...

CVE-2020-19037

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...

CVE-2020-19037

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-18982

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

Cross site scripting

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

Arbitrary file deletion

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

CVE-2020-19038 affects Halo version 0.4.3 and is described as a File Deletion vulnerability via the delBackup function. The connected documents consistently identify Halo 0.4.3 as vulnerable to arbitrary file deletion through delBackup, indicating a flaw in the handling of that function. The root...

CVE-2020-19037

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...

CVE-2020-19037

The CVE-2020-19037 entry concerns Halo 0.4.3 with an incorrect access control vulnerability that allows a malicious user to bypass encryption and view encrypted articles via cookies. The root cause is improper access control. The connected documents provide concrete details about the affected pro...

CVE-2020-18982

CVE-2020-18982 is a Cross-Site Scripting (XSS) vulnerability affecting Halo version 0.4.3, exploitable via the CommentAuthorUrl parameter. The incident is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.) with consistent wording: Halo 0.4.3 is vulnerable to XSS through CommentAutho...