Arbitrary Code Injection

accesslog is vulnerable to arbitrary code injection. The vulnerability exists in compile function in compile.js due to lack of sanitization of inputs which allows an attacker to inject and execute arbitrary javascript code...

librdkafka:fuzz_regex: Heap-buffer-overflow in compile

Detailed Report: https://oss-fuzz.com/testcase?key=6209392337354752 Project: librdkafka Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerasanlibrdkafka Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x620000001000 Crash State: compile compile compile...

PT-2013-1333

Name of the Vulnerable Software and Affected Versions Perl versions prior to 5.17.7 TWiki versions prior to 5.1.3 Foswiki versions 1.0.x through 1.0.10 and 1.1.x through 1.1.6 Description The issue is related to the compile function in Maketext.pm, which does not properly handle backslashes and...