Denial of Service in extension "Code Highlight" (codehighlight)

The extension bundles a vulnerable version of the 3rd party JavaScript component “prism” which is known to be vulnerable against Regular expression Denial of Service ReDoS...

JadedWraith - Light-weight UNIX Backdoor

Lightweight UNIX backdoor for ethical hacking. Useful for red team engagements and CTFs. Something I wrote a few years ago as part of a game I was playing with a friend to try to backdoor as many VMs in each other's labs without being caught or having our tools reverse engineered/signatured...

GHSA-HQHP-5P83-HX96 prismjs Regular Expression Denial of Service vulnerability

Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU...

The vulnerability of the Prism syntax extraction tool, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Prism syntax extraction tool is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Regular Expression Denial Of Service (ReDoS)

prism is vulnerable to regular expression denial of service. An attacker is able to send a malicious input string,leading to an intensive usage of CPU and an application crash...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

prism is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3801 Inefficient Regular Expression Complexity in prismjs/prism

prism is vulnerable to Inefficient Regular Expression Complexity...

Prism 安全漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prism suffers from a security vulnerability that stems from Prism's susceptibility to inefficient regular expression complexity...

New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

By Deeba Ahmed According to researchers, the PRISM backdoor has been on their radar for more than 3.5 years. This is a post from HackRead.com Read the original post: New variant of PRISM Backdoor WaterDrop targets Linux systems...

Prism Resource Management Error Vulnerability

Prism is an application software. It is a lightweight, extensible syntax highlighting tool.A security vulnerability exists in versions of Prism prior to 1.24.0, which stems from the fact that when Prism is used to highlight untrusted text, an attacker can exploit the vulnerability to craft a stri...

CVE-2021-32723

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...

CVE-2021-32723

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...

CVE-2021-32723

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...

Design/Logic Flaw

Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service ReDoS. When Prism is used to highlight untrusted user-given text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fix...