external_expat_AOSP10_r33_CVE-2022-23852

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

EUVD-2026-92122

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219

Mammoth.js versions 1.3.0 before 1.12.3 are vulnerable to a Regular Expression Denial of Service (ReDoS) . The flaw exists in the style map tokeniser located in lib/styles/parser/tokeniser.js due to overlapping regex alternatives . An attacker can provide a crafted .docx file containing an unterm...

CorelightForSentinelOne

Singularity Operations Center용 SentinelOne 대시보드 개요 이 가이드는 네트워크 트래픽을 모니터링하고 분석하기 위한 강력한 데이터 인사이트를 제공하는 SentinelOne 대시보드를 설정하고 활용하는 데 도움을 줍니다. 보안 분석가, 네트워크 관리자 또는 IT 전문가라면 이 대시보드를 통해 네트워크의 보안 상태를 쉽게 시각화하고 추적할 수 있습니다. 설치 및 구성 파서 구성 마켓플레이스를 통한 파서 설치 -- TBD -- GitHub 리포지토리를 통한 파서 설치 참고: 마켓플레이스 대신...

CVE-2025-55763

CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.16 latest release as of yet. Vulnerable code The crash occurs here in src/civetweb.c during the last strcat marked. Fix See the pull request. PoC The PoC crashes the server performing an heap overflow, however it is possible to achiev...

external_expat_AOSP10_r33_CVE-2022-23990

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CVE-2017-5638

CVE-2017-5638 The Apache Struts 2 versions 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 have a flaw in their Jakarta Multipart parser. This flaw causes incorrect handling of exceptions and generation of error messages when attempting to upload files. As a result, attackers can remotely execute...

VLC_CVE-2021-25804_Analysis

AVI 파일은 여러 개의 트랙을 가질 수 있습니다. 예를 들어 오디오 트랙과 비디오 트랙이 있습니다. 임의 개수의 트랙을 파싱하려면 VLC는 먼저 주어진 트랙이 완료되었고 재생 가능한지 확인해야 합니다. 이를 위해 두 개의 변수가 설정됩니다. 둘 다 이름이 itrack입니다. 변수 psys는 우리의 목적에 있어 avi 파일을 나타냅니다. 따라서 완료되고 재생 가능한 트랙을 참조하는 데 사용되는 "공식" itrack 변수는 psys-itrack입니다. 이 변수는 다음 매크로로 초기화됩니다: TABINITpsys-itrack,...

external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

SrHollow

SrHollow LSA secrets 추출, 기존 VSS 섀도 복사본 재사용 + 인라인 regf 파서 + bcrypt.dll을 통한 AES-256 LSA 복호화. 6단계 체인 1. \GLOBAL?? 열거 — NtOpenDirectoryObject + NtQueryDirectoryObject 사용. 가장 높은 번호의 HarddiskVolumeShadowCopyN을 선택. 2. 존재하지 않으면 , SrClient.dll의 SRSetRestorePointWBEGINSYSTEMCHANGE, DEVICEDRIVERINSTALL로 폴백...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

보안 권고: facil.io의 음수 청크 크기 파싱으로 인한 메모리 손상 배정된 CVE ID : CVE-2026-66731 제품: facil.io 영향받는 버전: facil.io = 0.7.5 0.7.5, 0.7.6, master; 0.7.5에서 0.8.x HTTP/1.1 파서가 백포트되면서 도입됨 - 0.6.x 또는 0.7.0–0.7.3에는 존재하지 않음 구성 요소: lib/facil/http/parsers/http1parser.h CWE: CWE-20 Improper Input Validation, CWE-682...

zk-xml-probe

zk-xml-probe 승인된 버그 바운티 테스트를 위한 XML 파서 동작CVE-2026-45071의 정적 XML 픽스처...

Navigate CMS 2.9.4 - Server-Side Request Forgery

Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...