Lucene search
+L

83 matches found

Kitploit
Kitploit
added 2026/09/17 1:04 a.m.13 views

CVE-2026-6042-PoC

CVE-2026-6042: musl libc iconv의 알고리즘 복잡성 DoS musl의 iconv GB18030 4바이트 디코더의 갭 건너뛰기 루프로 인해, 작은 조작된 입력이 과도한 CPU 시간을 소비할 수 있습니다. 40KB의 적대적 페이로드가 CPU 코어 하나를 40분 이상 점유할 수 있습니다. 권고 : https://www.openwall.com/lists/oss-security/2026/04/09/19 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-6042 권고문의 내용과 달...

4.8CVSS5.7AI score0.00236EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/14 1:34 p.m.7 views

CVE-2026-68497

A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...

7.5CVSS5.5AI score0.00581EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 8:28 p.m.13 views

EUVD-2026-66396

NLTK: ReDoS in nltk.text.Text.findall via unvalidated user-supplied regular expressions...

8.7CVSS5.7AI score0.00489EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2026/08/27 1:38 p.m.11 views

CVE-2026-80206

A flaw was found in NLTK, specifically within its tgrep module. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions. When processed, these expressions can cause indefinite CPU saturation, leading to a...

8.2CVSS5.7AI score0.00264EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/08/27 1:37 p.m.11 views

CVE-2026-80205

A flaw was found in NLTK. A remote attacker can exploit a regular expression denial of service ReDoS vulnerability in the Text.findall and TokenSearcher.findall methods. These methods accept user-supplied regular expressions without validation, allowing an attacker to provide crafted patterns tha...

8.7CVSS6AI score0.00489EPSS
SaveExploits1References5
OSV
OSV
added 2026/08/26 11:16 a.m.8 views

PYSEC-2026-3751

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS5.9AI score0.00264EPSS
SaveExploits1References2
PyPA
PyPA
added 2026/08/26 11:16 a.m.11 views

PYSEC-2026-3751

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS5.9AI score0.00264EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2026/08/26 11:16 a.m.14 views

CVE-2026-80206

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS0.00264EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/26 11:16 a.m.12 views

CVE-2026-80205

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

8.7CVSS0.00489EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/26 10:28 a.m.33 views

CVE-2026-80206

NLTK (a Python natural language processing library) versions before 3.10.3 contain a ReDoS vulnerability in the tgrep module. The _tgrep_node_action function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels witho...

8.2CVSS5.4AI score0.00264EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/08/26 10:28 a.m.48 views

CVE-2026-80206 NLTK 3.10.2 Regular Expression Denial of Service via tgrep

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS0.00264EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/26 10:28 a.m.8 views

CVE-2026-80206 NLTK 3.10.2 Regular Expression Denial of Service via tgrep

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS5.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/26 10:28 a.m.14 views

CVE-2026-80206 NLTK 3.10.2 Regular Expression Denial of Service via tgrep

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS5.4AI score0.00264EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/26 10:28 a.m.8 views

CVE-2026-80205 NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

8.7CVSS5.6AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-80205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept...

8.7CVSS5.3AI score0.00489EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
added 2026/08/26 12:00 a.m.2 views

CVE-2026-80206: Inefficient Regular Expression Complexity

NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels without any validation or...

8.2CVSS0.00264EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
added 2026/08/26 12:00 a.m.3 views

CVE-2026-80205: Inefficient Regular Expression Complexity

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

8.7CVSS0.00489EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-80206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a regular expression denial of service ReDoS vulnerability in the tgrep module. The tgrepnodeaction function compiles user-supplied...

8.2CVSS6.4AI score0.00264EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.18 views

PT-2026-82080

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description The tgrep module contains a regular expression denial of service ReDoS issue. The tgrep node action function compiles user-supplied regular expressions within /regex/ pattern nodes and executes them...

8.2CVSS5.6AI score0.00264EPSS
SaveExploits1References19
NVD
NVD
added 2026/08/25 7:16 p.m.15 views

CVE-2026-55620

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.routing.noparenthesis in emlparser/routing.py removes parenthesized CFWS comments from Received: headers with a regex-based...

7.5CVSS0.00366EPSS
SaveExploits0References4
Rows per page
Query Builder