jsleak

jsleak jsleak ist ein Werkzeug zur Identifizierung sensibler Daten in JS-Dateien mittels Regex-Mustern. Obwohl es dafür entwickelt wurde, kannst du es verwenden, um alles zu identifizieren, solange du ein passendes Regex-Muster hast. Installation Direkt: root@kitploit: your package manager instal...

CVE-2026-42533-POC

CVE-2026-42533 Overflow del buffer heap e perdita di informazioni dall'heap pre-autenticazione in nginx, causati dalla mancata salvataggio/ripristino dello stato delle catture PCRE tra le due passate del motore degli script. Una variabile map basata su regex valutata tra due riferimenti di cattur...

PT-2026-79501

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un write up sulla macchina Steel Mountain di TryHackMe.com e exploit per CVE-2014-6287 Crediti Non prendo alcun credito per la scoperta e lo sfruttamento originali di questa vulnerabilità. Grazie alle seguenti persone! Scoperta: Daniele Linguaglossa Autore del modu...

DEBIAN-CVE-2026-72818

The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...

CVE-2026-72818

The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...

FakeDns

FakeDns Aggiornamento 14/04/2020 - rimosso il supporto a Python 2 e codice migrato a Python3 Ora con round-robin e opzioni migliorate! Bug: @crypt0s - Twitter [email protected] - Email Un server DNS basato su espressioni regolari Python! root@kitploit: USAGE: ./fakedns.py -h -c Config path -...

CVE-2026-72818 NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...

CVE-2026-72818 NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...

GHSA-2P39-2JF3-FV2Q next-video: Unauthenticated arbitrary file read via /api/video request handler

Impact The HTTP route handler exported by next-video/request-handler — which the README instructs consumers to mount at /api/video — allows an unauthenticated remote attacker to read arbitrary .json files from the production filesystem of any application following the documented setup. The...

RegEx-DoS

👮 👊 Scanner per la Negazione del Servizio ReDos tramite RegEx Ti aiuta a trovare le Espressioni Regolari vulnerabili ad attacchi di Negazione del Servizio. Si prega di leggere lelinee guida per i contributi prima di contribuire. Uno screenshot della scansione ReDoS in azione. Cos'è la Negazione d...

CVE-2026-77082

n8n before 1.123.69 , 2.x before 2.33.4 , and 2.34.x before 2.34.1 is affected by a ReDoS vulnerability in the Filter and Switch nodes . The root cause is that user-supplied regex patterns are compiled with new RegExp() and executed synchronously on the worker thread without complexity validation...

CVE-2026-77082 n8n before 1.123.69 ReDoS via Filter and Switch Node

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...

CVE-2026-77082 n8n before 1.123.69 ReDoS via Filter and Switch Node

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...

CVE-2026-77082 n8n before 1.123.69 ReDoS via Filter and Switch Node

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...

The vulnerability of regular expression functions in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-78937

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.34.x prior to 2.34.1 Description A regular expression denial of service ReDoS exists in the Filter and Switch nodes. The issue occurs because user-supplied regex...

PT-2026-79260

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.1 Description The URLS regular expression in nltk/tokenize/casual.py, which is compiled into TweetTokenizer.WORD RE and used by TweetTokenizer.tokenize, contains an unbounded domain-label prefix. When processing inp...

Oracle Linux 10 : perl-Date-Manip (ELSA-2026-56971)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56971 advisory. 6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790 Tenable has...

CVE-2026-76401 Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure timestamp extraction with a crafted regular expression and matching event data to block a Kafka Connect worker thread, stopping event...