CVE-2011-0762

CVE-2011-0762 Exploit C exploit for the CVE-2011-0762 vulnerability in FTP servers that allows sending a STAT command with a malicious payload to cause potential crashes or unwanted execution. Description This exploit connects to an FTP server and authenticates using a provided username and...

brace-expansion: brace-expansion: Denial of Service via crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...

DoS-Braces-3.03

CVE-Candidato: Denegación de Servicio en braces mediante Expansión de Llaves Separadas por Comas Paquete: braces npm Versión: 3.0.3 última Gravedad: ALTA CVSS 7.5 CWE: CWE-400 Consumo de Recursos No Controlado Estado: No reportado Nota: Este es un hallazgo independiente. CVE-2024-4068 abordó la...

CVE-2026-93687

A flaw was found in braces. This stack overflow vulnerability exists in the recursive Abstract Syntax Tree AST walkers due to a lack of depth guards. A remote attacker can exploit this by supplying deeply nested brace patterns, leading to the exhaustion of the call stack and termination of the...

Linux Distros Unpatched Vulnerability : CVE-2026-93687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace...

Uncontrolled Recursion

Overview braces is a Bash-like brace expansion, implemented in JavaScript. Affected versions of this package are vulnerable to Uncontrolled Recursion in the recursive AST walkers, which lack depth guards. An attacker can supply deeply nested brace patterns that stay within the character limit to...

DEBIAN-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

UBUNTU-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

EUVD-2026-82983

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

CVE-2026-93687 affects the braces library (micromatch) through version 3.0.3 . The vulnerability resides in the recursive AST walkers (in compile.js, parse.js, and expand.js) that lack depth guards. An attacker can supply deeply nested brace patterns under the character limit to exhaust the call ...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-99971

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687: Uncontrolled Recursion

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-95431

Name of the Vulnerable Software and Affected Versions braces versions prior to 3.0.4 Description A stack overflow occurs in the recursive AST Abstract Syntax Tree walkers due to a lack of depth guards. An attacker can provide deeply nested brace patterns that remain within the character limit to...

Oracle Linux 10 : nodejs22 (ELSA-2026-55541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55541 advisory. - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and...