Regular Expression Denial of Service (ReDoS)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the regexReplace process. An attacker can exhaust server resources and cause denial of service b...

IE11: Use-after-free in Js::RegexHelper::RegexReplace(CVE-2018-0866)

There is a Use-after-free vulnerability in Internet Explorer that could potentially be used for memory disclosure. This was tested on IE11 running on Window 7 64-bit with the latest patches applied. Note that the PoC was tested in a 64-bit tab process via TabProcGrowth=0 registry flag and the pag...

Microsoft Internet Explorer 11 - Js::RegexHelper::RegexReplace Use-After-Free Exploit

Exploit for windows platform in category dos / poc...

Microsoft Internet Explorer scripting engine 'Js::RegexHelper::RegexReplace' memory misreference vulnerability

Internet Explorer IE is a web browser that comes with the Windows operating system. scripting engine is one of the JavaScript engines. A memory misreference vulnerability exists in the Microsoft Internet Explorer scripting engine 'Js::RegexHelper::RegexReplace'. A remote attacker could exploit th...