CVE-2017-0017

CVE-2017-0017 affects Microsoft Edge where the RegEx class in the XSS filter can be exploited to conduct cross-site scripting and obtain sensitive information via unspecified vectors. The description notes this is distinct from other CVEs in the same year. The connected documents do not provide c...

CVE-2017-0017

The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in...

The regular expression uses the improper triggering of the system command execution vulnerability-vulnerability warning-the black bar safety net

Sometimes, through a regular expression to the string of white list filter is not good。 This example demonstrates a regular expression in the string to the white list filter of time may lead to the OSCI（Operating System Command Injection）vulnerabilities. 0x01 text The test code is as follows:...

CVE-2016-9643

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

CVE-2016-9643

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

CVE-2016-9643

CVE-2016-9643 affects WebKit (WebKitGTK+/WebKit engine) as described in the initial document: the regex processing path in WebKit 2.4.11 allows remote attackers to cause a denial of service via a crafted input that consumes memory (example pattern: many ($ (open parenthesis and dollar) followed b...

CVE-2016-9643

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

CVE-2016-9643

Removed by vendor...

CVE-2016-9643: Uncontrolled Resource Consumption

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

CVE-2016-9643

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

PT-2017-10232

Name of the Vulnerable Software and Affected Versions Webkit version 2.4.11 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by exploiting the regex code. This can be achieved by using a large number of and $ characters followed by -2,16...

UBUNTU-CVE-2016-9643

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service memory consumption as demonstrated in a large number of $ open parenthesis and dollar followed by -2,16 and a large number of + plus close parenthesis...

UBUNTU-CVE-2016-6233

The 1 order and 2 group methods in ZendDbSelect in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern \w in a regular expression...

DEBIAN-CVE-2017-6004

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...

CVE-2017-6004

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...

mDNS Spoofer

This module will listen for mDNS multicast requests on 5353/udp for A and AAAA record queries, and respond with a spoofed IP address assuming the request matches our regex. This module requires Metasploit: https://metasploit.com/download Current source:...

NETGEAR WNR2000v5 - Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits Source: https://raw.githubusercontent.com/pedrib/PoC/master/exploits/netgearPwn.rb Remote code execution in NETGEAR WNR2000v5 - by Pedro Ribeiro email protected / Agile Information Security Released on 20/12/2016 NOTE: this exploit is...

DEBIAN-CVE-2015-3217

PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service stack-based buffer overflow via a crafted regular expression, as demonstrated by /^?:?1\.|^\\W?++$/...

CVE-2015-5073

Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...

DEBIAN-CVE-2016-9857

An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...