WS-2019-0271

subtext in all versions is vulnerable to Denial of Service. This is caused by the fact that the package fails to enforce the maxBytes configuration for payloads with chunked encoding that are written to the file system. Which allows attackers to send requests with arbitrary payload sizes. This ma...

EUVD-2012-4339

Malware in sbrugna...

PT-2023-14021

Name of the Vulnerable Software and Affected Versions golang.org/x/net/http2/h2c affected versions not specified Description A request smuggling attack is possible when using MaxBytesHandler. The body of an HTTP request is not fully consumed, and when the server attempts to read HTTP2 frames from...

GHSA-2MVQ-XP48-4C77 Denial of Service in subtext

All versions of subtext are vulnerable to Denial of Service DoS. The package fails to enforce the maxBytes configuration for payloads with chunked encoding that are written to the file system. This allows attackers to send requests with arbitrary payload sizes, which may exhaust system resources...

Denial of Service in subtext

All versions of subtext are vulnerable to Denial of Service DoS. The package fails to enforce the maxBytes configuration for payloads with chunked encoding that are written to the file system. This allows attackers to send requests with arbitrary payload sizes, which may exhaust system resources...

PT-2020-21284

Name of the Vulnerable Software and Affected Versions @commercial/subtext versions prior to 5.1.1 Description The issue allows attackers to send requests with arbitrary payload sizes, which may exhaust system resources leading to Denial of Service. This is due to the package's failure to enforce...

PT-2020-21028

Name of the Vulnerable Software and Affected Versions @hapi/subtext versions prior to 6.1.2 Description The issue allows attackers to send requests with arbitrary payload sizes, potentially exhausting system resources and leading to Denial of Service. This is due to the failure to enforce the...

PT-2020-20963

Name of the Vulnerable Software and Affected Versions subtext versions prior to 6.1.2 Description The issue allows attackers to send requests with arbitrary payload sizes, potentially exhausting system resources and leading to Denial of Service. This is due to the package's failure to enforce the...

CVE-2012-4400

repository/repositoryajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field...

CVE-2012-4400: Undefined Security Weakness

repository/repositoryajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field...

PT-2012-5374

Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.x through 2.2.4 Moodle versions 2.3.x through 2.3.1 Description The issue allows remote authenticated users to bypass intended upload-size restrictions. This is achieved by setting a -1 value in the maxbytes field in the...