OSV-2025-1004 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=470469212 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6482464316129280 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2020-10878)

Perl before 5.30.3 has an integer overflow related to mishandling of a PLregkindOPn == NOTHING situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. This plugin only works with Tenable.ot. Please visit...

EUVD-2021-23834

Malware in sbrugna...

EUVD-2021-1100

Malware in sbrugna...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

keycloak:ValidatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=4919588887789568 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ValidatorFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-databind:AdaLObjectReader3Fuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5594381816496128 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: AdaLObjectReader3Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hamcrest:HamcrestFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5790145863811072 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

keycloak:ValidatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=6364780233818112 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ValidatorFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

@accordproject/concerto-ui-react-demo (>=0.82.10-20200221024018, <=0.83.1-20200224151908), @alfresco/adf-testing (6.0.0-A.2-8258) +25 more potentially affected by CVE-2024-4068 via braces (>=3.0.0, <=3.0.2)

braces NPM version =3.0.0, =0.82.10-20200221024018, =0.0.2, =1.0.1, =1.16.0, =0.4.1, =0.4.16, =0.4.17, =0.4.17, =0.4.1, =0.4.26 - @react-jsonschema-form-custom/material-ui-fy2ybeyiz 1.0.0 - @react-jsonschema-form-custom/material-ui-nd6dp3pzm 1.0.0 - @react-jsonschema-form/material-ui-bh9hzkrmk...

GLiNet - Router Authentication Bypass

DZONERZY Security Research GLiNet: Router Authentication Bypass ======================================================================== Contents ======================================================================== 1. Overview 2. Detailed Description 3. Exploit 4. Timeline...

ffcss Security Vulnerabilities

ffcss is a CLI interface for applying and configuring Firefox CSS themes. A security vulnerability exists in versions prior to ffcss 0.2.0, which stems from a vulnerability that allows an attacker to introduce all characters of a regular expression by bypassing the limitations of the...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=5517428324696064 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

opencsv:CSVReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5409066396286976 Project: opencsv Fuzzing Engine: libFuzzer Fuzz Target: CSVReaderFuzzer Job Type: libfuzzerasanopencsv Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

GHSA-6W63-H3FJ-Q4VW fast-xml-parser vulnerable to Regex Injection via Doctype Entities

Impact "fast-xml-parser" allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for DoS attacks. By crafting an entity name that results in an...

fast-xml-parser vulnerable to Regex Injection via Doctype Entities

Impact "fast-xml-parser" allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for DoS attacks. By crafting an entity name that results in an...

fastjson2:JsonFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=4883155558727680 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jackson-databind:AdaLObjectReader3Fuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6011852725551104 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: AdaLObjectReader3Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security...

fastjson2:JsonFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5353652611317760 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...