recheck

recheck Le vérificateur ReDoS fiable Licence Licence MIT. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

regexploit

Regexploit Trouvez les regex vulnérables au déni de service par expression régulière ReDoS. Plus d'informations surle blog de Doyensec De nombreux analyseurs d'expressions régulières par défaut ont une complexité dans le pire des cas illimitée. La correspondance d'une regex peut être rapide lorsq...

vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

exploit-workshop

atelier-exploitation Dans cet atelier pas à pas, vous apprendrez à exploiter diverses vulnérabilités réelles existant dans des versions vulnérables de packages d'une application Node.js et Java. Logiciel requis à installer pour cet atelier Vous pouvez suivre cet atelier de 2 manières différentes...

axios-redos

Attaque par déni de service par expression régulière dans Axios Ce dépôt contient une POC de CVE-2021-3749. Présentation Une faille ReDoS déni de service par expression régulière a été découverte dans le paquet axios. Un attaquant capable de fournir une entrée spécialement conçue à la fonction tr...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

PoC-CVE-2025-25200

CVE-2025-25200 Контекст Уязвимость: CVE-2025-25200 Тип: Regular Expression Denial of Service ReDoS Компонент: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 Описание: Эта уязвимость демонстрирует квадратичную временную сложность On2 или, в более критичных сценариях, экспоненциальную O2n, то...

CVE-2024-22641

CVE-2024-22641 Тип уязвимости Отказ в обслуживании через регулярные выражения ReDoS Затронутый продукт и версия TCPDF AddPage; $pdf-ImageSVG$file='poc.svg'; ? Примечание: при проверке с помощью preglasterror после уязвимой строки кода регулярное выражение завершится с ошибкой...

CVE-2024-22640

CVE-2024-22640 Тип уязвимости Регулярное выражение, вызывающее отказ в обслуживании ReDoS Затрагиваемый продукт и версия TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ?...

CVE-2022-45729

이 저장소에는 README가 없습니다...

Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

GHSA-8PQF-F4M5-798G Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

CVE-2026-106454 Twisted: IMAP wildcardToRegexp() ReDoS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

CVE-2026-106454

The Twisted event-based framework (supporting Python 3.6+ ) is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions 25.5.0 and earlier . The flaw exists in the wildcardToRegexp() function within twisted/mail/imap4.py, where characters from an authenticated client's LIST or LSU...

CVE-2026-106454 Twisted: IMAP wildcardToRegexp() ReDoS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

GHSA-2G7P-5934-Q4W7 Payload: ReDoS in Multipart Content-Type Validation

Impact A malformed multipart request body could take an extremely long time to finish. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...

Payload: ReDoS in Multipart Content-Type Validation

Impact A malformed multipart request body could take an extremely long time to finish. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...

NPM: Payload: ReDoS in Multipart Content-Type Validation

NPM: Payload: ReDoS in Multipart Content-Type Validation vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

CVE-2026-105854 Payload: ReDoS in Multipart Content-Type Validation

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an extremely long time, resulting in uncontrolled resource...