1. Reverse Engineering >
  2. Sicherheitslücken >
  3. Useragent up to 2.1.12 on Node.js Regular Expression Loop denial of service

ArabicEnglishFrenchGermanGreekItalianJapaneseKoreanPersianPolishPortugueseRussianSpanishTurkishVietnamese

Useragent up to 2.1.12 on Node.js Regular Expression Loop denial of service


Exploits vom | Direktlink: vuldb.com Nachrichten Bewertung

A vulnerability, which was classified as problematic, has been found in Useragent up to 2.1.12 on Node.js (JavaScript Library). This issue affects an unknown part. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product....
https://vuldb.com/?id.118919

Externe Quelle mit kompletten Inhalt anzeigen


Zur Startseite von Team IT Security

➤ Weitere Beiträge von Team Security | IT Sicherheit

Useragent bis 2.1.12 auf Node.js Regular Expression Loop Denial of Service

vom 717.86 Punkte ic_school_black_18dp
Eine Schwachstelle wurde in Useragent bis 2.1.12 auf Node.js entdeckt. Sie wurde als problematisch eingestuft. Hierbei geht es um eine unbekannte Funktion. Durch das Beeinflussen durch Regular Expression kann eine Denial of Service-Schwachstelle (Loop) ausg

Regex Performance Improvements in .NET 5

vom 497.89 Punkte ic_school_black_18dp
The System.Text.RegularExpressions namespace has been in .NET for years, all the way back to .NET Framework 1.1. It’s used in hundreds of places within the .NET implementation itself, and directly by thousands upon thousands of applications. Across all of t

Venom - A Multi-hop Proxy For Penetration Testers

vom 376.04 Punkte ic_school_black_18dp
Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes.Features network topology multi-hop socks5 proxy multi-hop port forward port r

MyEtherWallet: Local Storage Custom Node Credentials Leak

vom 284.67 Punkte ic_school_black_18dp
Summary Credentials for a custom node are stored in plain text inside Local Storage on the user's machine. If this node is configured in a certain way this could lead to the theft of any funds in accounts attached to this node, by a local attacker. A

Upcoming SameSite Cookie Changes in ASP.NET and ASP.NET Core

vom 253.42 Punkte ic_school_black_18dp
SameSite is a 2016 extension to HTTP cookies intended to mitigate cross site request forgery (CSRF). The original design as was a feature web sites would opt into by adding the new parameters, not setting the SameSite property, or setting it to value of

Pwn2Own Returns to Vancouver for 2020

vom 247.68 Punkte ic_school_black_18dp
Jump to the contest rules As each new year starts, we at the Zero Day Initiative begin to think of spring and the Vancouver edition of the Pwn2Own contest. It was in Vancouver where the contest began back in 2007 and continues to be where we push the

How to Upgrade to TypeScript without anybody noticing, Part 2

vom 234.64 Punkte ic_school_black_18dp
This guide will show you how to fix Typescript compile errors in Javascript project that recently added Typescript support via a tsconfig.json. It assumes that the tsconfig.json is configured according to the description in part 1 of this post, and that you also installed types for some of your dependencies from the @types/* namespace. This guide

NODE JS: ADVANCED CONCEPTS

vom 202.3 Punkte ic_school_black_18dp
Highest Rated Created by Stephen Grider Last updated 4/2018 English What Will I Learn? Absolutely master the Event Loop and understand each of its stages Utilize Worker Threads and Clustering to dramatically improve the performance of Node servers Sp

Kube-Bench - Checks Whether Kubernetes Is Deployed According To Security Best Practices As Defined In The CIS Kubernetes Benchmark

vom 202.05 Punkte ic_school_black_18dp
kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.Tests are configured with YAML files, making this tool easy to update as test specifications evolve.Please Not

Modernizing Find in Files

vom 171.19 Punkte ic_school_black_18dp
Find in Files is one of the most commonly used features in Visual Studio. It’s also a feature that gets a substantial amount of feedback, and due to the age of the code, has been very costly to improve. Earlier this year, we decided to reimplement th

Scanner-Cli - A Project Security/Vulnerability/Risk Scanning Tool

vom 168.49 Punkte ic_school_black_18dp
The Hawkeye scanner-cli is a project security, vulnerability and general risk highlighting tool. It is meant to be integrated into your pre-commit hooks and your pipelines.Running and configuring the scannerThe Hawkeye scanner-cli assumes that your dir

USN-4118-1: Linux kernel (AWS) vulnerabilities

vom 165.96 Punkte ic_school_black_18dp
linux-aws vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux-aws - Linux kernel for Amazon Web Services

Team Security Diskussion über Useragent up to 2.1.12 on Node.js Regular Expression Loop denial of service