4040 matches found
Authlib : JWE zip=DEF decompression bomb enables DoS
Summary Authlib’s JWE zip=DEF path performs unbounded DEFLATE decompression. A very small ciphertext can expand into tens or hundreds of megabytes on decrypt, allowing an attacker who can supply decryptable tokens to exhaust memory and CPU and cause denial of service. Details - Affected component...
PT-2025-43412
Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.6.5 Description Authlib’s JWE implementation, specifically when handling the zip=DEF option, is susceptible to a denial of service. A small ciphertext can expand to a very large plaintext during decompression due to...
JLSEC-2025-11 `BZ2_decompress` in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...
BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors...
BBOT 安全漏洞
BBOT is an open source recursive Internet scanner from Black Lantern Security. A security vulnerability exists in BBOT that stems from the decompression module's handling of malicious compressed files that could lead to arbitrary file writes, which could trigger remote code execution...
EUVD-2020-18712
Malware in sbrugna...
EUVD-2002-0752
Malware in sbrugna...
EUVD-2011-2868
Malware in sbrugna...
EUVD-2005-2660
Malware in sbrugna...
EUVD-2005-4779
Malware in sbrugna...
EUVD-2010-0236
Malware in sbrugna...
EUVD-2020-24405
Malware in sbrugna...
EUVD-2007-2958
Malware in sbrugna...
EUVD-2010-4267
Malware in sbrugna...
EUVD-2021-25624
Malware in sbrugna...
EUVD-2021-16025
Malware in sbrugna...
EUVD-2021-2064
Malware in sbrugna...
EUVD-2018-6576
Malware in sbrugna...
EUVD-2017-1597
Malware in sbrugna...