901 matches found
CVE-2020-11034: URL Redirection to Untrusted Site
In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6...
PT-2020-12502
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.6 Description The issue allows bypassing the open redirect protection based on a regexp. This enables potential redirection to unintended locations, potentially leading to phishing or other malicious activities. The...
glpi -- bypass of the open redirect protection
MITRE Corporation reports: In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6...
Denial Of Service (DoS) Via Infinite Loop
named-regexp is vulnerable to denial of service attacks. When the input pattern does not contain any named groups, calling the function Matcher.namedGroups on a matching input causes an infinite loop by building a list of empty matches, leading to an application crash...
chromium-browser: Memory corruption in regexp length check
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
JSC YarrJIT initParenContextFreeList Byte Overwrite
JSC: YarrJIT: A bug in initParenContextFreeList void initParenContextFreeList RegisterID parenContextPointer = regT0; RegisterID nextParenContextPointer = regT2; sizet parenContextSize = ParenContext::sizeFormparenContextSizes; parenContextSize = WTF::roundUpToMultipleOfparenContextSize; // Check...
PT-2019-2892
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 76.0.3809.87 Description The issue is related to an inappropriate implementation in JavaScript, which can lead to heap corruption. A remote attacker can potentially exploit this by using a crafted HTML page. The...
CVE-2019-1010177
Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function JsiRegExpNew jsi/jsiRegexp.c:39. The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d...
EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-1733)
According to the versions of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The pcreexec function in pcreexec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial...
njs/njs_process_script_fuzzer: Crash in njs_object_prop_alloc
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5688604573040640 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerubsannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001002c33f2...
Konan - Advanced Web Application Dir Scanner
Konan is an advanced open source tool designed to brute force directories and files names on web/application servers. Installation Download Konan by cloning the Git repository: git clone https://github.com/m4ll0k/Konan.git konan Install requirements with pip cd konan && pip install -r...
CVE-2019-12798
CVE-2019-12798 affects Artifex MuJS 1.0.5, where regcompx in regexp.c does not constrain the size of a regular expression, causing an overflow of the parsed syntax list. Documentation from multiple advisories (Red Hat, Debian, CNVD, OSV) confirms a vulnerability in MuJS that can lead to a heap-ba...
CVE-2019-11413
An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check...
CVE-2019-11413
An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check...
(Pwn2Own) Apple Safari Global RegExp JIT Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
(Pwn2Own) Apple Safari RegExp JIT Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Fedora 28 : gnupg (2018-4ef71d3525)
doc Remove documentation for future option faked sys - build Don't use dev srandom on OpenBSD - Do not use C99 feature - g10 Fix regexp sanitization - g10 Push compress filter only if compressed - gpg Sanitize diagnostic with the original file name CVE-2018-12020 Note that Tenable Network...
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free
Microsoft Windows - JScript RegExp.lastIndex Use-After-Free alert'start'; var vars = ; var r = new RegExp; forvar i=0; i20000; i++ varsi =...
