Lucene search
+L

9784 matches found

GithubExploit
GithubExploit
added 2022/06/05 6:23 p.m.351 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-202...

9.8CVSS10AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/05 1:41 p.m.315 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2022-26134, an arbitrary file read vulnerabi...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/04 11:16 a.m.349 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 Confluence OGNL expression injected RCECVE-202...

9.8CVSS10AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/04 10:44 a.m.517 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 PoC Confluence Server and Data Center - CVE-20...

9.8CVSS9.5AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 7:24 p.m.366 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2022/06/03 1:52 p.m.298 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits77
Veracode
Veracode
added 2022/06/03 9:04 a.m.38 views

Regular Expression Denial Of Service (ReDoS)

semver-regex is vulnerable to regular expression denial of service. The vulnerability exists in semverRegex function in index.js due to improper use of regular expressions which allows an attacker to cause a ReDos...

7.5CVSS4.3AI score0.01576EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2022/06/03 5:29 a.m.26 views

Regular Expression Denial Of Service (ReDoS)

markdown-link-extractor is vulnerable to regular expression denial of service. An attacker can crash the application by providing malicious input to the module.exports function of index.js due to the insecure regex pattern used for the image parameter...

7.5CVSS3.9AI score0.0108EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/06/03 12:01 a.m.45 views

GHSA-FP36-299X-PWMW Regular expression denial of service in devcert

An exponential ReDoS Regular Expression Denial of Service can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method...

7.5CVSS6AI score0.00632EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/06/03 12:01 a.m.37 views

Regular expression denial of service in markdown-link-extractor

An exponential ReDoS Regular Expression Denial of Service can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function...

7.5CVSS4.5AI score0.0108EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/06/03 12:00 a.m.10 views

GHSA-J9M2-H2PV-WVPH Regular expression denial of service in jquery-validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.3AI score0.01499EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/06/03 12:00 a.m.130 views

Regular expression denial of service in jquery-validation

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS4.5AI score0.01499EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/02 9:15 p.m.3 views

CVE-2022-32250

net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...

7.8CVSS8.5AI score0.02914EPSS
SaveExploits6References21
OSV
OSV
added 2022/06/02 9:15 p.m.8 views

UBUNTU-CVE-2022-32250

net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...

7.8CVSS6.7AI score0.02914EPSS
SaveExploits6References6
OSV
OSV
added 2022/06/02 2:15 p.m.18 views

CVE-2021-43308

An exponential ReDoS Regular Expression Denial of Service can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function...

7.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2022/06/02 2:15 p.m.29 views

CVE-2021-43308

An exponential ReDoS Regular Expression Denial of Service can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function...

7.5CVSS0.0108EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/02 2:15 p.m.15 views

CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

7.5CVSS7.5AI score
SaveExploits0References1
OSV
OSV
added 2022/06/02 2:15 p.m.27 views

CVE-2021-43307

An exponential ReDoS Regular Expression Denial of Service can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test method...

7.5CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2022/06/02 2:15 p.m.19 views

CVE-2021-43307

An exponential ReDoS Regular Expression Denial of Service can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test method...

7.5CVSS0.01576EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.6 views

Devcert 安全漏洞

Devcert is a package for SSL development from npm, Inc. A denial of service vulnerability exists in versions prior to Devcert 1.2.1, which stems from triggering an exponential ReDoS regular expression denial of service in the Devcert package. An attacker could exploit this vulnerability to cause ...

7.5CVSS5.7AI score0.00632EPSS
SaveExploits1References2
Rows per page
Query Builder