Lucene search
+L

8 matches found

Snyk
Snyk
added 2026/08/20 12:00 a.m.10 views

SQL Injection

Overview org.springframework.data:spring-data-jpa is a package that is used to implement JPA based repositories. Affected versions of this package are vulnerable to SQL Injection in the validation of Sort parameters when crafted payloads are accepted from untrusted sources and used without prior...

6.5CVSS6AI score0.00205EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/05 6:52 p.m.10 views

CVE-2026-67550

A flaw was found in re2, a component that provides Node.js bindings for Google's RE2 regular expression engine. An attacker can exploit a vulnerability by manipulating the lastIndex parameter with a non-ASCII input. This manipulation can lead to an out-of-bounds heap read, causing the process to...

5.7CVSS5.4AI score0.0012EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/31 4:53 p.m.16 views

EUVD-2026-51297

re2: Out-of-bounds heap read in exec/test/match via attacker-influenced lastIndex on a non-ASCII subject → uncatchable process crash DoS...

5.7CVSS5.4AI score0.0012EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/30 8:18 p.m.12 views

CVE-2026-67550

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII...

5.7CVSS0.0012EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/30 7:59 p.m.11 views

CVE-2026-67550

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace, and split, allowing an attacker-influenced lastIndex on a non-ASCII...

5.7CVSS5.9AI score0.0012EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.19 views

PT-2026-66604

Name of the Vulnerable Software and Affected Versions re2 versions prior to 1.25.2 Description The software validates lastIndex against the UTF-8 byte length of a subject but incorrectly uses it as a UTF-16 code-unit offset in the exec, test, match, replace, and split functions. When a non-ASCII...

5.7CVSS5.4AI score0.0012EPSS
SaveExploits0References8
exploitpack
exploitpack
added 2013/11/03 12:00 a.m.28 views

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

Plogue Sforzando 1.665 - Buffer Overflow SEH PoC !/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link:...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2013/11/03 12:00 a.m.57 views

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

!/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link: http://www.softpedia.com/dyn-postdownload.php?p=227357&t=0&i=1 Vendor site:...

5.3AI score
SaveExploits0
Rows per page
Query Builder