986 matches found
CVE-2026-126673
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
DEBIAN-CVE-2026-126673
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
CVE-2026-126673
The Data::Dump::Streamer Perl module (versions before 3.00 ) contains a vulnerability in the _dump_qr function. The issue is caused by failing to escape "$" or "@" characters when writing a Regexp's pattern into a qr literal . Specifically, patterns containing {@[ ... ]} or ${...} are executed as...
EUVD-2026-124152
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
CVE-2026-126673
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
CVE-2026-126673 Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
CVE-2026-126673: Code Injection
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dumpqr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$\ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
PT-2026-145637
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in dump qr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@ ... " and "$ ... " in the pattern run as code when the dump is evaluated. An already escaped delimit...
cve-2023-41993-test
original poc from po6ix post exploitation i copied from nikiasb's and Linus Henze's regexp exploits, 5aelo's Phrack paper/Pwn2Own 2018 exploit chain, LiveOverflow blog/youtube series...
waf-community-bypasses
WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...
elastic-search-email-extractor
Email Extractor This Go program is designed to extract email addresses from a list of Elastic Search Databases. It takes in a list of URLs and will search the Database of each URL to find email addresses. Install go install github.com/RandomRobbieBF/elastic-search-email-extractor@latest Usage To...
CVE-2026-69083_exploit
CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthenticated SQL injection in SiYuan a Go-based knowledge-base app via the asset-content search endpoint. POST /api/search/fullTextSearchAssetContent builds a raw SQL statement by concatenating the user-controlled query value straight into ...
Exploit for Integer Overflow or Wraparound in Gitlab
CVE-2026-97229 - GitLab CE/EE CI/CD Integer Overflow RCE By...
CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2026:1793267784)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793267784 advisory. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an incomplete list of...
CLEANSTART-2022-TT67846 compile in regexp
Security vulnerability affects the mujs package. compile in regexp...
CLEANSTART-2024-RN84197 NULL Pointer Dereference in function vim_regexec_string at regexp
Security vulnerability affects the vim package. NULL Pointer Dereference in function vimregexecstring at regexp...
CLEANSTART-2026-FK46251 double free was found in the Regexp compiler in Ruby 3
CVE-2022-28738 affects multiple packages. A double free was found in the Regexp compiler in Ruby 3. See references for individual vulnerability details...
CLEANSTART-2024-OT69577 regexp
Security vulnerability affects the go package. regexp...
CVE-2026-119300
Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...
CVE-2026-119300 Wekan: ReDoS via Unescaped User Input in RegExp
Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...