CVE-2024-32640

creationtimestamp| type| source ---|---|--- 2024-05-12 14:37:32+00:00| published-proof-of-concept| https://t.me/CNArsenal/2463 2024-05-16 01:20:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7315 2024-05-16 16:34:37+00:00| published-proof-of-concept| https://t.me/lostsec/514...

CVE-2022-32640

CVE-2022-32640 concerns MediaTek Meta WiFi with an out-of-bounds write caused by a missing bounds check. The vulnerability enables local privilege escalation with SYSTEM level execution privileges required; no user interaction is needed. Connected documents confirm affected component is Meta WiFi...

CVE-2022-32640

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652...

Reddit: Regular Expression Denial of Service vulnerability

Summary: The vulnerability I have found is classified as a Regular Expression Denial of Service. While inspecting the source code file RealtimeGQLSubscriptionAsync.js I came across the nodemodule subscriptions-transport-ws See Screenshot 1. The search result of the subscriptions-transport-ws...

Regular Expression Denial of Service

Overview In ws before versions 5.2.3, 6.2.2 and 7.4.6 there is a ReDOS vulnerability. Impact A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. Proof of concept js for const length of 1000, 2000, 4000, 8000, 16000, 32000 const value ...

CVE-2021-32640

CVE-2021-32640 affects the Node.js ws library. A specially crafted value in the Sec-Websocket-Protocol header can be used to significantly slow down a ws server (resource consumption). The issue is fixed in [email protected]. In vulnerable versions, mitigation includes reducing the maximum length of HTTP ...