Lucene search
+L

21 matches found

Hacker One
Hacker One
•added 2018/02/27 4:40 a.m.•43 views

Node.js third-party modules: `concat-with-sourcemaps` allocates uninitialized Buffers when number is passed as a separator

I would like to report an uninitialized Buffer allocation issue in concat-with-sourcemaps. It allows to extract sensitive data from uninitialized memory or to cause a DoS by passing in a large number, in unlikely setups where separator is attacker-controlled. Module module name:...

0.8AI score
SaveExploits0
Rows per page
Query Builder