9716 matches found
UBUNTU-CVE-2026-101906
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTPPROXY or HTTPSPROXY is configured, NOPROXY or noproxy is non-empty, redirects are followed, and a...
CVE-2026-101906
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTPPROXY or HTTPSPROXY is configured, NOPROXY or noproxy is non-empty, redirects are followed, and a...
CVE-2026-101903
A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...
CVE-2026-101906
A flaw was found in axios. A remote attacker operating a malicious server can cause a Denial of Service DoS by returning an HTTP redirect containing a crafted hostname. When proxy bypass settings are configured, the application processes the hostname with an inefficient regular expression that...
CVE-2026-101906
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTPPROXY or HTTPSPROXY is configured, NOPROXY or noproxy is non-empty, redirects are followed, and a...
CVE-2023-32309
CVE-2023-32309...
CVE-2020-17144-EXP
CVE-2020-17144-EXP 条件: Exchange2010; 普通用户 默认用法写webshell: CVE-2020-17144-EXP.exe mail.example.com user pass 执行命令 & 端口复用: 修改ExploitClass.cs 参考 @zcgonvh...
CVE-2019-19203
CVE-2019-19203 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función gb18030mbcenclen del archivo gb18030.c, se desreferencia un puntero UChar sin verificar si ha pasado el final de la cadena coincidente. Esto provoca una lectura excesiva del búfer basada en heap...
roninforge-angularjs-migration
roninforge-angularjs-migration 用于AngularJS到Angular 18 的GitHub Copilot指令包的源真存储库，该指令包已交付到github/awesome-copilot的instructions/angularjs-to-angular-18.instructions.md。这是RoninForge计划的一系列面向企业的Copilot产品中的第一个（计划中：.NET Framework到.NET 9迁移、HIPAA PHI编辑、T-SQL反模式、遗留代码的特征测试）。 问题 AngularJS 1.x 于2021年12月31日...
CVE-2026-102270: Inefficient Regular Expression Complexity
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT ispemformat is affected because lazy PEM regular expression backtracks extensively. This occurs when a certificate-like input contains repeated BEGIN markers without a matching END marker. As a result, ispemforma...
CVE-2026-101906: Uncontrolled Resource Consumption
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTPPROXY or HTTPSPROXY is configured, NOPROXY or noproxy is non-empty, redirects are followed, and a...
CVE-2026-101903: Inefficient Regular Expression Complexity
Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters on both sides of the media-type separator. An application passes an attacker-controlled malformed data URL containing many slash characters and no...
CVE-2025-6998-CalibreWeb-0.6.24-ReDoS
CVE-2025-6998-CalibreWeb-0.6.24-ReDoS 针对 CalibreWeb v0.6.24 的 ReDoS 漏洞利用...
CVE-2024-28784
CVE-2024-28784 — IBM QRadar SIEM 规则向导中的存储型XSS 🛠 产品信息 厂商： IBM 产品： IBM Security QRadar SIEM 受影响版本： 7.5.0 UpdatePackage 7 Build 20230822112654 组件： 规则向导（正则表达式逻辑块） CVE ID： CVE-2024-28784 🐞 漏洞摘要 IBM QRadar SIEM 的规则向导组件中存在一个存储型跨站脚本（XSS）漏洞。问题在于对用户输入在“正则表达式”逻辑块中的不当清理。包含未转义 HTML/JavaScript...
CVE-2026-31816
CVE-2026-31816 - Bypass de autenticación a RCE en Budibase CVE-2026-31816 es una vulnerabilidad crítica de bypass de autenticación y autorización que afecta a Budibase. La vulnerabilidad se encuentra en el middleware de autorización del lado del servidor responsable de proteger los endpoints de l...
Exploit for Inefficient Regular Expression Complexity in Kjd Internationalized_Domain_Names_In_Applications
Domain Validation Service — CVE-2024-3651 Demo A Python Flask...
CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...
CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...
Emat
Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...
