Metasploit HTTP(S) handler DoS

This module exploits the Metasploit HTTPS handler by sending a specially crafted HTTP request that gets added as a resource handler. Resources which come from the external connections are evaluated as RegEx in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS. Test...

Denial of Service in rgb2hex

All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value. Recommendation Update to version 0.1.6 or later...

PT-2019-20010

Name of the Vulnerable Software and Affected Versions rgb2hex versions prior to 0.1.6 Description The issue concerns a Regular Expression Denial of Service ReDoS that can occur when an attacker passes a specially crafted invalid color value. Recommendations Update to version 0.1.6 or later...

Regular Expression Denial Of Service (ReDoS)

Django is vulnerable to regular expression denial of service ReDoS. The attack is due to lack of validation of inputs to a regular expression in django.utils.text.Truncator's chars and words methods, eventually causing an application crash if the input html=True is provided...

Regular Expression Denial Of Service (ReDoS)

gettext-parser is vulnerable to Regular Expression Denial Of Service. The library contains a regular expression that is vulnerable to catastrophic backtracking. When presented with a malicious long string, the regex will run for an exponentially long time, potentially causing the application to...

Regular Expression Denial Of Service (ReDoS)

marked is vulnerable to regular expression denial of service DoS. The attack is possible because it does not use efficient link tags in regular expression, thereby leading to a high CPU usage if an attacker parses an input link with nested parenthesis containing a large number of link tokens to t...

wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)

saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

Design/Logic Flaw

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

CVE-2018-14733

The CVE-2018-14733 issue affects Odoo, specifically the OCA dbfilter_from_header module, impacting Odoo 8.x–11.x. The root cause is a regular expression denial of service (ReDoS) under certain circumstances, exposed via the dbfilter_from_header plugin. Public references in Red Hat, Debian, and CN...

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

CVE-2018-14733: Improper Input Validation

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

PT-2019-20068

Name of the Vulnerable Software and Affected Versions underscore.string versions prior to 3.3.5 Description The issue concerns a Regular Expression Denial of Service ReDoS in the unescapeHTML function due to an overly-broad regex. This results in a slowdown that grows exponentially with larger...

Regular Expression Denial of Service (ReDoS)

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS attacks...

GHSA-H6CH-V84P-W6P9 Regular Expression Denial of Service (ReDoS)

A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS attacks...

Regular Expression Denial of Service in remarkable

lib/common/htmlre.js in remarkable 1.7.1 allows Regular Expression Denial of Service ReDoS via a CDATA section...

GHSA-G95F-P29Q-9XW4 Duplicate Advisory: Regular Expression Denial of Service in braces

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cwfw-4gq5-mrqx. This link is maintained to preserve external references. Original Description Versions of braces prior to 2.3.1 are vulnerable to Regular Expression Denial of Service ReDoS. Untrusted input may...

Duplicate Advisory: Regular Expression Denial of Service in braces

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cwfw-4gq5-mrqx. This link is maintained to preserve external references. Original Description Versions of braces prior to 2.3.1 are vulnerable to Regular Expression Denial of Service ReDoS. Untrusted input may...