CVE-2016-4074

The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...

CVE-2016-4074

The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...

Design/Logic Flaw

The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...

CVE-2016-4074

The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...

CVE-2016-4074: Allocation of Resources Without Limits or Throttling

The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...

jq heap buffer overflow vulnerability

jq is a software developer Stephen Dolan developed a lightweight command-line JSON processor . A heap buffer overflow vulnerability exists in jq's tokenadd function, which can be exploited to cause a denial of service application crash with the help of a specially crafted JSON file...

Google Finance was traced to reflected File Download(RFD)vulnerabilities-vulnerability warning-the black bar safety net

! A Portuguese network security expert David Sopas found the impact of Google Finance a reflected File DownloadRFDvulnerabilities. I'm in audits of other clients time to discover this vulnerability, through RFD, you need to establish a page to force the download. This Google JSON file of the...

TomatoCart 'json.php'任意文件上传漏洞

No description provided by source...

CVE-2014-1604

CVE-2014-1604 affects the RPLY (python-rply) parser generator: the cache functionality in parsergenerator.py before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name. This enables local cache spoofing, as described in multiple refere...