4336 matches found
Node.js third-party modules: Command Injection Vulnerability in win-fork/win-spawn Packages
I would like to report a command injection vulnerability in win-fork and win-spawn packages. It allows an attacker to inject multiple commands in exec-like manner. Module module name: win-spawn version: 2.0.0 npm page: https://www.npmjs.com/package/win-spawn npm page:...
GHSA-HXF5-MG84-PJ4M Moderate severity vulnerability that affects moment
Withdrawn, accidental duplicate publish. The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service CPU consumption via a long string, aka a "regular expression Denial of Service ReDoS."...
GHSA-2J9C-9VMV-7M39 Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...
Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...
GHSA-Q75G-2496-MXPP Regular Expression Denial of Service in parsejson
Affected versions of parsejson are vulnerable to a regular expression denial of service when parsing untrusted user input. Recommendation The parsejson package has not been functionally updated since it was initially released. Additionally, it provides functionality which is natively included in...
boost/boost_regex_fuzzer: Crash in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5847161655787520 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
Privilege Escalation
microsoft.chakracore is vulnerable to privilege escalation. This happens when the regex parser does not properly handle a regex with more than 2^15 capturing groups, causing an integer overflow that can allow a non-privileged user to gain the rights of current user. This CVE ID is different from...
Privilege Escalation
microsoft.chakracore is vulnerable to privilege escalation. This happens because the application does not properly initialize the array during regex construction in RegexCompileTime.cpp, leading to memory corruption which can allow an attacker to gain user rights and other possible attacks such a...
Probequest - Toolkit For Playing With Wi-Fi Probe Requests
Toolkit allowing to sniff and display the Wi-Fi probe requests passing near your wireless interface. Probe requests are sent by a station to elicit information about access points, in particular to determine if an access point is present or not in the nearby environment. Some devices mostly...
Security Bulletin: API Connect minimatch CVE-2017-1556
Summary API Connect has addressed the following vulnerability. API Connect is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. Vulnerability Details CVEID: CVE-2017-1556 DESCRIPTION: IBM API Connect is...
boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5439484087762944 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
CVE-2018-8926
Permissive regular expression vulnerability in synophotodsmuser in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter...
CVE-2018-8926
Permissive regular expression vulnerability in synophotodsmuser in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter...
Privilege escalation
Permissive regular expression vulnerability in synophotodsmuser in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter...
CVE-2018-8926
Synology Photo Station (affected versions: before 6.8.5-3471 and before 6.3-2975) contains a permissive regex vulnerability in synophoto_dsm_user that allows remote authenticated users to escalate privileges via the fullname parameter. The issue leads to high-impact results (C:H/I:H/A:H) per CVSS...
AZL-44400 CVE-2017-16137 affecting package js-jquery 3.5.0-4
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
AZL-44772 CVE-2017-16137 affecting package nodejs-nodemon 2.0.3-5
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
DEBIAN-CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
CVE-2017-16118
The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition...