exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

CVE-2024-27088

CVE-2024-27088 취약점 개요 CVE-2024-27088 Feb 26, 2024 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

CVE-2023-43646

CVE-2023-43646 Vulnerability Overview CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS in node.js package Part of the rebob project Vulnerability Description github advisories /\sfunction?:\s|\s/^?:/+/\s^\/+/ This vulnerability can be exploited when there is an imbalance in parentheses, which results...

recheck

recheck The trustworthy ReDoS checker License MIT License. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

regexploit

Regexploit اعثر على التعبيرات النمطية المعرضة لهجمات رفض الخدمة عبر التعبيرات النمطية ReDoS. المزيد من المعلومات علىمدونة Doyensec العديد من محللات التعبيرات النمطية الافتراضية لها تعقيد أسوأ حالة غير محدود. قد تكون مطابقة التعبير النمطي سريعة عند تقديم سلسلة إدخال مطابقة. ومع ذلك، يمكن لبعض سلاس...

vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

axios-redos

Axios Regular Expression Denial Of Service Attack This repo hold a POC of CVE-2021-3749. Overview A ReDoS regular expression denial of service flaw was found in the axios package. An attacker that is able to provide crafted input to the trim function may cause an application to consume an excessi...

PoC-CVE-2025-25200

CVE-2025-25200 Context Vulnerability: CVE-2025-25200 Type: Regular Expression Denial of Service ReDoS Component: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 Description: This vulnerability presents quadratic time complexity On² or, in more critical scenarios, exponential O2ⁿ, meaning the...

CVE-2024-22641

CVE-2024-22641 نوع الثغرة حرمان الخدمة عبر التعبيرات النمطية ReDoS المنتج والإصدار المتأثر TCPDF AddPage; $pdf-ImageSVG$file='poc.svg'; ? ملاحظة: عند الفحص باستخدام preglasterror بعد سطر الكود المعرض للثغرة، سيخرج التعبير النمطي بالخطأ PREGBACKTRACKLIMITERROR...

CVE-2024-22640

CVE-2024-22640 نوع الثغرة الأمنية رفض الخدمة بواسطة التعبير العادي ReDoS المنتج والإصدار المتأثر TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ? ملاحظة: التحقق باستخدام...

CVE-2022-45729

لا يحتوي هذا المستودع على ملف README...

Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

GHSA-8PQF-F4M5-798G Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

CVE-2026-106454

The Twisted event-based framework (supporting Python 3.6+ ) is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions 25.5.0 and earlier . The flaw exists in the wildcardToRegexp() function within twisted/mail/imap4.py, where characters from an authenticated client's LIST or LSU...

CVE-2026-106454 Twisted: IMAP wildcardToRegexp() ReDoS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

CVE-2026-106454 Twisted: IMAP wildcardToRegexp() ReDoS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

GHSA-2G7P-5934-Q4W7 Payload: ReDoS in Multipart Content-Type Validation

Impact A malformed multipart request body could take an extremely long time to finish. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...

Payload: ReDoS in Multipart Content-Type Validation

Impact A malformed multipart request body could take an extremely long time to finish. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...