CVE-2024-8048

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

CVE-2024-8048

Progress Telerik Reporting (desktop/Standalone Report Designer) prior to 2024 Q3 (version 18.2.24.924) is affected by an insecure expression evaluation vulnerability that enables object injection and may allow code execution. The issue is documented as CVE-2024-8048; CVSS v3.1 base score 7.8 (HIG...

CVE-2024-8048 Telerik Reporting Insecure Expression Evaluation

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

CVE-2024-8048 Telerik Reporting Insecure Expression Evaluation

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

SUSE CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

Inefficient Regular Expression Complexity

Overview xhtml2pdf is a PDF generator using HTML and CSS Affected versions of this package are vulnerable to Inefficient Regular Expression Complexity via the use of a crafted string in the getcolor function. PoC html expl = 'rgb00' + '0' 3456 with open"PoC.html", "w" as f: f.writef""" exploit ""...

GHSA-JJ5C-HHRG-VV5H xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

DEBIAN-CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

UBUNTU-CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

TPAS Log4Shell PoC This repository contains a Proof of Concep...

CVE-2024-25885

CVE-2024-25885 affects xhtml2pdf v0.2.13, where a flaw in the getcolor function in utils.py allows a crafted string to trigger a Regular Expression Denial of Service (ReDOS). The connected documents consistently describe this vulnerability as present in xhtml2pdf-0.2.13 and reproduced in multiple...

xhtml2pdf 安全漏洞

xhtml2pdf is xhtml2pdf open source an HTML to PDF converter using Python, ReportLab Toolkit, html5lib and pypdf. A security vulnerability exists in xhtml2pdf version 0.2.13, which stems from a problem in the getcolor function of utils.py, allowing an attacker to cause a regular expression denial ...

PT-2024-21182

Name of the Vulnerable Software and Affected Versions xhtml2pdf version 0.2.13 Description The issue allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string to the getcolor function in utils.py. This can be exploited by providing a specifically design...

Regular Expression Denial Of Service (ReDoS)

langflow is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to improper handling of the remainingtext argument in the HTTP POST Request Handler, allowing an attacker to exploit the inefficient regular expression patterns and causes excessive resource consumption...

The vulnerability of the HTTP router Find my Way, related to the use of a regular expression c with inefficient computational complexity, allows a hacker to trigger a Denial-of-Service attack (ReDos).

The vulnerability of the HTTP router Find my Way is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow a remote attacker to trigger a denial-of-service attack ReDos...

ROS-20241001-14

A vulnerability in the Nokogiri software library is related to the use of an inefficient regular expression. expression. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of denial of service...

Moderate: Red Hat Security Advisory: RHACS 4.5 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes security and bug fixes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which give...

Subnet Solutions Inc. PowerSYSTEM Center

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerabilities: Server-Side Request Forgery SSRF, Inefficient Regular Expression Complexity, Cross-Site Request Forgery CSRF 2. RISK...