11254 matches found
CVE-2026-67989
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x...
awesome-mba
μ΄ μ μ₯μλ νΌν© λΆμΈ-μ°μ MBA λλ νμ κ΄λ ¨λ λ§ν¬λ₯Ό ν¬ν¨ν©λλ€. PRμ μΈμ λ νμν©λλ€. μ¬κΈ°μ μλ μΌλΆ μλ£λ MBAμ μλ°ν κ΄λ ¨λμ§λ μμ§λ§, λͺ¨λ μ΄λ€ λ°©μμΌλ‘λ κ΄λ ¨μ΄ μμ΅λλ€. λ Όλ¬Έ νΌν© λΆμΈ-μ°μ λ³νμ μ΄μ©ν μννΈμ¨μ΄ μ 보 μλ νΌν© λΆμΈ-μ°μ ννμμ μ΄μ©ν λλ ν : μ¬κ΅¬μ±, λΆμ λ° λ¨μν λꡬ νΌν© λΆμΈ-μ°μ ννμ λ¨μνλ₯Ό μν μ§κ΅ μ κ·Όλ²μ λΆμ λ° μμ© νλ‘κ·Έλ¨ ν©μ± κΈ°λ° νΌν© λΆμΈ-μ°μ ννμ λ¨μνλ₯Ό ν΅ν μ½λ μλλ ν νΌν© λΉνΈμμ΄μ¦-μ°μ ννμ λν SMT μλ² μ±λ₯ ν₯μ...
CVE-2026-96292
Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
axios: Axios: Denial of Service via malformed data URLs
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
axios: Axios: Denial of Service via malformed data URLs
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
CVE-2026-77387
A flaw was found in geopy. An attacker can cause a Denial of Service DoS by supplying excessively long or malformed coordinate strings to coordinate parsing functions such as Point.fromstring or reverse geocoding methods. Due to inefficient regular expression evaluation on unvalidated input,...
CVE-2026-77387
geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression behavior when an application passes a long malformed coordinate string without the 256-character input limit used by the fix. Geocoder rever...
ROS-20261002-73-0070
The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261002-73-0068
The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-104216
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Lua bindings contain an inefficient regular expression complexity and inefficient algorithmic complexity issue. This can lead to performance degradation or resource exhaustion wh...
CVE-2026-67989
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x...
ROS-20261002-73-0069
The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261002-73-0067
The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261002-73-0066
The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-77387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.fromstring can spend excessive CPU time due to inefficient regular-expression...
CVE-2026-67989
The crmne/ruby_llm library (specifically at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 ) contains a polynomial-time regular expression denial-of-service (ReDoS) condition. This vulnerability exists within the Mistral model capability matching functionality when running on Ruby 3.1.x . The is...
CVE-2024-54152
βοΈπ¨ μ§ν μ€ CVE-2024-54152 POC Angular Expressionsλ Angular.JS μΉ νλ μμν¬μ© ννμμ λ 립ν λͺ¨λλ‘ μ 곡ν©λλ€. λ²μ 1.4.3 μ΄μ μλ 곡격μκ° μλλ°μ€λ₯Ό νμΆνλ μ μ± ννμμ μμ±νμ¬ μμ€ν μμ μμ μ½λλ₯Ό μ€νν μ μμ΅λλ€. λ 볡μ‘νλΉκ³΅κ° νμ΄λ‘λλ₯Ό μ¬μ©νλ©΄ μμ€ν μμ μμ ν μμ μ½λ μ€ν κΆνμ μ»μ μ μμ΅λλ€. μ΄ λ¬Έμ λ Angular Expressions λ²μ 1.4.3μμ ν¨μΉλμμ΅λλ€. λ κ°μ§ μμ ν΄κ²° λ°©λ²μ μ¬μ©ν μ μμ΅λλ€. protoμ λν μ κ·Όμ...
PoC-CVE-2025-25200
CVE-2025-25200 컨ν μ€νΈ μ·¨μ½μ : CVE-2025-25200 μ ν: μ κ· ννμ μλΉμ€ κ±°λΆReDoS κ΅¬μ± μμ: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 μ€λͺ : μ΄ μ·¨μ½μ μ 2μ°¨ μκ° λ³΅μ‘λ On2 λλ λ μ¬κ°ν μλ리μ€μμλ μ§μ μκ° λ³΅μ‘λ O2nμ λνλ λλ€. μ¦, μ λ ₯μ μ²λ¦¬νλ λ° νμν μκ°μ΄ μ λ ₯ ν¬κΈ°μ λ°λΌ μ¦κ°ν©λλ€μμΆμ . λ¬Έμ μ μμΈμ λ°±νΈλνΉμ΄λΌκ³ νλ μ κ· ννμ μμ§μ λ©μ»€λμ¦μ μμ΅λλ€. μ λ ₯ν ν°μ΄ μΌμΉνμ§ μμΌλ©΄ μμ§μ λ체 κ²½λ‘λ₯Ό...
CVE-2025-68613
CVE-2025-68613 β n8n RCE via Expression Injection κ΅μ‘ λ° μΉμΈλ 보μ μ°κ΅¬ λͺ©μ μΌλ‘λ§ μ¬μ©νμΈμ. κ°μ n8n μν¬νλ‘ μλν νλ«νΌμ μΉλͺ μ μΈ RCE μ·¨μ½μ CVSS 9.9μ λλ€. μΈμ¦λ μ¬μ©μλ μλλ°μ€ μ νμ μ°ννμ¬ executeCommand λ Έλλ₯Ό ν΅ν΄ μμμ OS λͺ λ Ήμ μ€νν μ μμ΅λλ€. νλ| μΈλΆ μ¬ν ---|--- CVE| CVE-2025-68613 CVSS| 9.9 μΉλͺ μ μν₯μ λ°λ λ²μ | = 0.211.0 μμ : κΈ°λ³Έ RCE bash pocfinal.sh...
Spring-Cloud-Function-SpEL
Spring-Cloud-Function-SpEL κ°μΈ λΈλ‘κ·Έμμ μμΈν λ΄μ©μ νμΈν μ μμ΅λλ€ https://pizz33.github.io/ Spring Cloud Function SpEL ννμ μ£Όμ μ μν ν μ€νΈ νκ²½ λ²μ java11, java -jar demo-0.0.1-SNAPSHOT.jar λͺ λ ΉμΌλ‘ μ€ν κ΅¬μΆ μλ£ ν 127.0.0.1:8080 ν¬νΈμ μ μ POST /functionRouter HTTP/1.1 Host: 127.0.0.1:8080...