265 matches found
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2021-40895
CVE-2021-40895 affects todo-regex v0.1.1 and is a Regular Expression Denial of Service (ReDOS) vulnerability triggered by crafted invalid TODO statements. Impact is denial of service; no exploit details provided beyond this. Remediation suggestion found in PT-2022-11323: for v0.1.1, update to a n...
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
todo-regex 安全漏洞
todo-regex is a regular expression used to match TODO statements in strings. todo-regex v0.1.1 is vulnerable to denial of service, which can be exploited by attackers to cause a denial of service when matching carefully crafted invalid TODO statements...
CVE-2021-40895: Inefficient Regular Expression Complexity
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
PT-2022-11323 · Unknown · Todo-Regex
Name of the Vulnerable Software and Affected Versions: todo-regex version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it matches crafted invalid TODO statements. This occurs because the regular expression used can be exploited to cause a...
WordPress Wbcom Designs BuddyPress Todo List plugin < 3.0.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability
Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Wbcom Designs BuddyPress Todo List plugin versions 3.0.0. Solution Update the WordPress Wbcom Designs BuddyPress Todo List plugin to the latest available version at least 3.0.0...
Unclear TwapOracle.consult algorithm
Handle cmichel Vulnerability details The TWAPOracle.consult function is unclear to the auditor. It seems to iterate through all registered pairs that share the token parameter USDV or VADER and then sums up the foreign token pair per token price. And divides this sum sumNative by the summed-up US...
Cross-site Scripting (XSS) - Stored in leantime/leantime
✍️ Description Stored xss bug using a xss payload in the todo name when adding a todo item 🕵️♂️ Proof of Concept Goto http://localhost/tickets/showKanban and add a todo item and copy paste the following xss payload in the todo-name javascript " Click on safe and go to the My Timesheets tab and see...
DcRat - A Simple Remote Tool Written In C#
DcRat is a simple remote tool written in C Introduction Features TCP connection with certificate verification, stable and security Server IP port can be archived through link Multi-Server,multi-port support Plugin system through Dll, which has strong expansibility Super tiny client size about 405...
Null pointer dereference
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.SparseFillEmptyRows. This is because of missing...
CVE-2021-29565 Null pointer dereference in `SparseFillEmptyRows`
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.SparseFillEmptyRows. This is because of missing...
CVE-2020-26713
REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The information submitted by the user is immediately returned in the response and not escaped leading to the reflected XSS vulnerability. Attackers can exploit vulnerabilities to steal login session informati...
Octopus WAF - Web Application Firewall Made In C Language And Use Libevent
OctopusWAF is a open source Web application firewall, is made in C language uses libevent to make multiple connections. First step Instal lib-pcre, if you use RPM based distros search pcre-devel package, in BSD based search in ports or brew... Need libevent-dev, on RPM distros libevent-devel,...
CVE-2020-13346
Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API...
CVE-2020-13346
Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API...