cve-2023-41993-test

po6ix से मूल पीओसी पोस्ट एक्सप्लॉइटेशन जो मैंने nikiasb के और Linus Henze के regexp एक्सप्लॉइट्स, 5aelo के Phrack पेपर/Pwn2Own 2018 एक्सप्लॉइट चेन, LiveOverflow ब्लॉग/यूट्यूब श्रृंखला से कॉपी किया...

waf-community-bypasses

Contournements communautaires de WAF Les Web Application Firewalls, aussi appelés WAF, sont de la camelote. Tous les fournisseurs, du moins cher Cloudflare aux « enterprise » comme Imperva, Akamai, F5, Checkpoint ou Fortinet, ne font que tromper leurs clients en délivrant 0 protection réelle. 99,...

CVE-2026-69083_exploit

CVE-2026-69083 — حقن SQL غير مصادق عليه في SiYuan حقن SQL غير مصادق عليه في SiYuan تطبيق قاعدة معرفة مبني على Go عبر نقطة نهاية البحث في محتوى الأصول. يقوم POST /api/search/fullTextSearchAssetContent ببناء جملة SQL خام عبر دمج قيمة query التي يتحكم فيها المستخدم مباشرةً داخل عبارة REGEXP دون أي...

elastic-search-email-extractor

ईमेल एक्सट्रैक्टर यह Go प्रोग्राम Elastic Search डेटाबेस की सूची से ईमेल पते निकालने के लिए डिज़ाइन किया गया है। यह URL की एक सूची लेता है और ईमेल पते खोजने के लिए प्रत्येक URL के डेटाबेस को खोजेगा। इंस्टॉल root@kitploit: go install github.com/RandomRobbieBF/elastic-search-email-extractor@latest...

OESA-2026-3424 postgresql-17 security update

PostgreSQL client programs Security Fixes: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the...

OESA-2026-3423 postgresql-17 security update

PostgreSQL client programs Security Fixes: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the...

BIT-GOLANG-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

BIT-POSTGRESQL-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

ROOT-APP-NPM-CVE-2026-4926 CVE-2026-4926 in path-to-regexp - Patched by Root

Root has patched CVE-2026-4926 in the path-to-regexp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-4923 CVE-2026-4923 in path-to-regexp - Patched by Root

Root has patched CVE-2026-4923 in the path-to-regexp package for Root:npm. Multiple fixed versions available...

SUSE CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Technical details about CVE-2026-56858 are not publicly available in the provided connected documents. Monitor for updates. The initial description notes that pathological inputs could close an unescaped '/' to inject content, potentially leading to XSS.

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

GO-2026-6091 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the regexp process. An attacker can execute arbitrary code as the operating system user running the database by submitting specially crafted text that bypasses encoding validation, leading to unanticipated...

AZL-95729 CVE-2026-14664 affecting package postgresql 16.14-1

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

ALPINE-CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

CVE-2026-14664

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...