Lucene search
+L

5 matches found

Metasploit
Metasploit
•added 2017/12/07 4:25 p.m.•280 views

ua-parser-js npm module ReDoS

This module exploits a Regular Expression Denial of Service vulnerability in the npm module "ua-parser-js". Server-side applications that use "ua-parser-js" for parsing the browser user-agent string will be vulnerable if they call the "getOS" or "getResult" functions. This vulnerability was fixed...

7.5CVSS0.5AI score0.09242EPSS
SaveExploits2
OSV
OSV
•added 2016/04/12 2:59 p.m.•11 views

DEBIAN-CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

8.6CVSS8.2AI score0.02282EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2016/04/12 2:00 p.m.•43 views

CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

8.1AI score0.02282EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2016/04/12 2:00 p.m.•58 views

CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

8.6CVSS8.2AI score0.02282EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/12 12:00 a.m.•4 views

CVE-2015-8702: Improper Input Validation

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

8.6CVSS7.8AI score0.02282EPSS
SaveExploits1References2
Rows per page
Query Builder