4763 matches found
CVE-2016-7239
The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...
Information disclosure
The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...
CVE-2016-7239
The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...
Microsoft Browser Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft browser XSS filter is abused to leak sensitive page information. An attacker who successfully exploited the vulnerability could obtain sensitive information from certain web pages. To exploit the vulnerability, an attacker would ha...
RedHat Update for php RHSA-2016:2598-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
php: Double free in _php_mb_regex_ereg_replace_exec
A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...
The vulnerability of the library that handles system calls and core functions of glibc allows a attacker to cause a service failure.
The vulnerability of the regcomp implementation in the library that handles system calls and core functions of glibc is related to errors in the code. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure termination of the application by using regular...
The vulnerability of the library that handles system calls and core functions of glibc allows a attacker to cause a service failure.
The vulnerability of the regcomp implementation in the library that handles system calls and core glibc functions is related to resource management errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure resource exhaustion through regular expressions containin...
CVE-2016-7040
Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections...
CVE-2016-7040
Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections...
SUSE-SU-2016:2246-1 Security update for perl
This update for perl fixes the following issues: - CVE-2016-6185: xsloader looking at a 'eval' directory bsc988311 - CVE-2016-1238: searching current directory for optional modules bsc987887 - CVE-2015-8853: regex engine hanging on bad utf8 bnc976584 - CVE-2016-2381: environment dup handling bug...
openSUSE Security Update : pcre2 (openSUSE-2016-966)
This update for pcre2 fixes the following issues : - pcre2 10.22 : - The POSIX wrapper function regcomp did not used to support back references and subroutine calls if called with the REGNOSUB option. It now does. - A new function, pcre2codecopy, is added, to make a copy of a compiled pattern. -...
Mimikittenz - Post-Exploitation Powershell Tool for Extracting Juicy info from Memory
mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes using regex patterns including but no...
Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information
The vulnerability exists in the file due to an incorrect limitation on the number of data items that can be viewed during regular expression searches. Exploiting this vulnerability allows malicious actors operating remotely to cause a service failure excessive CPU usage by using a specially craft...
CVE-2016-5768
A double free flaw was found in the mberegreplacecallback function of php which is used to perform regex search. This flaw could possibly cause a PHP application to crash...
Internet Bug Bounty: _php_mb_regex_ereg_replace_exec - double free
phpmbregexeregreplaceexec is prone to double free that can be turned into a code execution. Details about the bug: https://bugs.php.net/bug.php?id=72402 already fixed...
BookingeCMS HotelCMS酒店预订管理系统key和m=info.detail id存在注入
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase class TestPOCPOCBase: vulID = '' ssvid version = '1.0' author = 'kenan' vulDate = '' createDate =...
CVE-2016-1688
Removed by vendor...
pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)
PCRE before 8.38 mishandles the /?|\k'Pm'|?'Pm'/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...
pcre: Buffer overflow caused by lookbehind assertion (8.38/6)
PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp...