CVE-2023-4220

CVE-2023-4220...

CVE-2026-81725

NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...

exploit-workshop

exploit-workshop В этом пошаговом практикуме вы научитесь эксплуатировать различные реальные уязвимости, существующие в уязвимых версиях пакетов в приложениях на Node.js и Java. Необходимое программное обеспечение для этого практикума Вы можете пройти этот практикум двумя разными способами...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

regexploit

Regexploit Trouvez les regex vulnérables au déni de service par expression régulière ReDoS. Plus d'informations surle blog de Doyensec De nombreux analyseurs d'expressions régulières par défaut ont une complexité dans le pire des cas illimitée. La correspondance d'une regex peut être rapide lorsq...

CVE-2026-81725

NLTK before 3.10.3 contains a Regular Expression Denial of Service vulnerability in the Pl196xCorpusReader component. The root cause lies in lazy regex patterns within the read_block method, which can be triggered by supplying malformed TEI blocks containing many unmatched opening tags. Attackers...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 La version 1.4.2 de Waitress permet une attaque DOS lorsque Waitress reçoit un en-tête contenant des caractères invalides. Lorsqu'un en-tête comme "Bad-header: xxxxxxxxxxxxxxx\x10" est reçu, cela amène le moteur d'expression régulière à effectuer un...

CVE-2023-31606

CVE-2023-31606 Vulnérabilité Un problème de déni de service par expression régulière ReDoS a été découvert dans la fonction sanitizehtml de la gemme redcloth = v4.0.0. Cette vulnérabilité permet à des attaquants de provoquer un déni de service DoS en fournissant une charge utile spécialement...

CVE-2026-80206

A flaw was found in NLTK, specifically within its tgrep module. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions. When processed, these expressions can cause indefinite CPU saturation, leading to a...

CVE-2026-80205

A flaw was found in NLTK. A remote attacker can exploit a regular expression denial of service ReDoS vulnerability in the Text.findall and TokenSearcher.findall methods. These methods accept user-supplied regular expressions without validation, allowing an attacker to provide crafted patterns tha...

CVE-2026-79770

A flaw was found in Nokogiri. A remote attacker can inject specially crafted CSS selectors into methods such as Nodecss or Nodeatcss. This injection can lead to regular expression denial of service ReDoS due to exponential regex backtracking, causing the application to become unresponsive...

PoC-CVE-2025-25200

CVE-2025-25200 Kontext Sicherheitslücke: CVE-2025-25200 Typ: Regular Expression Denial of Service ReDoS Komponente: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 Beschreibung: Diese Sicherheitslücke weist eine quadratische Zeitkomplexität On2 oder in kritischeren Szenarien eine exponentiel...

recheck

recheck Il controllore ReDoS affidabile Licenza Licenza MIT. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 Void Tools Everything precedente alla v1.4.1.1022 è stata scoperta contenere una vulnerabilità di Denial of Service tramite espressione regolare ReDoS correzione in Everything 1.5 alpha Descrizione suggerita È stato scoperto che Void Tools Everything precedente alla...

CVE-2024-22641

CVE-2024-22641 نوع الثغرة حرمان الخدمة عبر التعبيرات النمطية ReDoS المنتج والإصدار المتأثر TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...

CVE-2024-22640

CVE-2024-22640 Tipo di vulnerabilità Denial of Service tramite espressione regolare ReDoS Prodotto e versione interessati TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ? Nota:...

CVE-2023-32309

CVE-2023-32309...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

CVE-2026-80205

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall and TokenSearcher.findall methods that accept user-supplied regular expressions without validation or timeout. Attackers can supply crafted regex patterns that cause catastrophic backtracking,...

CVE-2026-80206

NLTK (a Python natural language processing library) versions before 3.10.3 contain a ReDoS vulnerability in the tgrep module. The _tgrep_node_action function compiles user-supplied regular expressions embedded in /regex/ pattern nodes and executes them via re.search against tree node labels witho...