CVE-2016-10527

The riot-compiler project (version 2.3.21) contains a regex vulnerability causing a regular expression denial of service (catastrophic backtracking) under certain inputs. This affects riot-compiler’s ability to process some patterns efficiently, potentially impacting availability. The issue is do...

CVE-2016-10527

The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...

phpok 最新版储存型xss。

简要描述： rt 详细说明： 看到出了论坛这个新功能 xss过滤还是不够哦。 两处问题。 发布帖子处， 1 正则貌似有问题。 换行就绕过了对 onxxx的检测。 2 测试代码 漏洞证明：...

GLSA-200403-11 : Squid ACL [url_regex] bypass vulnerability

The remote host is affected by the vulnerability described in GLSA-200403-11 Squid ACL urlregex bypass vulnerability A bug in Squid allows users to bypass certain access controls by passing a URL containing '%00' which exploits the Squid decoding function. This may insert a NUL character into...