#1
OP 11 January, 2022 - 03:56 AM
Quote:Eight different security vulnerabilities arising from inconsistencies among 16 different URL parsing libraries could allow denial-of-service (DoS) conditions, information leaks and remote code execution (RCE) in web applications. The bugs were found in third-party web packages written for various languages. Those afflicted are Flask (a micro web framework written in Python), Video.js (an HTML5 video player), Belledonne (free VoIP and IP video phone), Nagios XI (network and server monitoring) and Clearance (password authentication for Ruby)


Source: https://threatpost.com/url-parsing-bugs-...ng/177493/
[Image: Refunding-2.gif]
[Image: jwGHBVl.gif]
[Image: h6S8dGS.gif]