Design/Logic Flaw

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...

+Message App improper handling of Unicode control characters

Overview +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links CWE-451. Akaki Tsunoda reported this vulnerability to IPA. JPCERT/CC...

Denial Of Service (DoS)

lite-server is vulnerable to denial of service. The vulnerability is due to the decodeURI function which is unable to parse control characters allowing an attacker to cause an application crash via malicious HTTP request...

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

JVN#43561812: +Message App improper handling of Unicode control characters

+Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links CWE-451. Impact A spoofed URL may be displayed and phishing attacks may be...

KDDI +Message 安全漏洞

KDDI +Message is a communication software from KDDI Japan. A security vulnerability exists in KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App, which stems from improper handling of Unicode control characters...

CVE-2022-43543

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...

CVE-2022-43543

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...

PT-2022-26959 · Kddi +2 · Kddi +Message App +2

Name of the Vulnerable Software and Affected Versions: KDDI +Message App for Android versions prior to 3.9.2 KDDI +Message App for iOS versions prior to 3.9.4 NTT DOCOMO +Message App for Android versions prior to 54.49.0500 NTT DOCOMO +Message App for iOS versions prior to 3.9.4 SoftBank +Message...

CVE-2022-43543

Affected products/versions: KDDI +Message App for Android <3.9.2 and iOS <3.9.4; NTT DOCOMO +Message App for Android <54.49.0500 and iOS <3.9.4; SoftBank +Message App for Android <12.9.5 and iOS

GHSA-89W7-5Q45-R53W lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

lite-server vulnerable to Denial of Service

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

CVE-2022-25940

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

Design/Logic Flaw

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...

lite-server 安全漏洞

npm lite-server is a lightweight development-specific node server from the U.S. npm. It serves web applications. A security vulnerability exists in lite-server that stems from vulnerability to denial-of-service DoS attacks when an attacker sends an HTTP request with control characters that cannot...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

xterm: Arbitrary Code Execution

Background xterm is a terminal emulator for the X Window system. Description xterm does not correctly handle control characters related to OSC 50 font ops sequence handling. Impact The vulnerability allows text written to the terminal to write text to the terminal's command line. If the terminal'...

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...