AZL-44361 CVE-2024-29041 affecting package nodejs-nodemon 2.0.3-5

Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an...

CVE-2024-0705

creationtimestamp| type| source ---|---|--- 2024-01-19 11:26:27+00:00| seen| https://t.me/ctinow/170149 2024-01-22 18:27:42+00:00| published-proof-of-concept| https://t.me/codeb0ss/1362 2024-01-26 17:35:17+00:00| seen| https://t.me/arpsyndicate/3015 2024-02-12 18:16:51+00:00| seen|...

Gzip Memory Bomb Denial Of Service

This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...

[Full-disclosure] firefox 2.0.0.2 crash

Can be dupe but in fast browsing over topics I did not discovered this exploit: http://people.zoy.org/sam/firefox-crash-save-session-before-clicking.gif I do NOT know anything else than this url. Just seen it in random discussion and anyone else I asked knows nothing. Current tests indicate that...