yahoo-inc/cve-impacts huggingface dataset:
CVE-2018-20555: The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
Key phrases: discover Twitter access_token, twitter account takeover
CVE-2018-20556: SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the booking_id parameter, sql injection
CVE-2018-20557: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter.
Key phrases: xss
CVE-2018-20558: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter.
Key phrases: xss
CVE-2018-20559: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter.
Key phrases: xss
CVE-2018-20560: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter.
Key phrases: xss
CVE-2018-20561: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter.
Key phrases: xss
CVE-2018-20562: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter.
Key phrases: xss
CVE-2018-20563: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter.
Key phrases: xss
CVE-2018-20564: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter.
Key phrases: xss
CVE-2018-20565: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter.
Key phrases: xss
CVE-2018-20566: An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
Key phrases: read resource" error messages for a crafted, path disclosure
CVE-2018-20567: An issue was discovered in DouCo DouPHP 1.5 20181221. \\\\install\\\\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
Key phrases: a reload of the product in opportunistic circumstances
CVE-2018-20568: Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
Key phrases: authentication bypass, SQL injection for authentication bypass, sql injection
CVE-2018-20569: user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
Key phrases: authentication bypass, SQL injection for authentication bypass, sql injection
CVE-2018-20570: jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2018-20571: DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\\\\Public\\\\Config\\\\config.ini.php to read the global configuration file.
Key phrases: read arbitrary files, read arbitrary files via a crafted admin.php?s=Tpl/Add/id request
CVE-2018-20572: WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893.
Key phrases: CVE-2018-15893, sql injection
CVE-2018-20573: The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Key phrases: denial of service (stack consumption and application crash), cause a denial of service (stack consumption
CVE-2018-20574: The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Key phrases: denial of service (stack consumption and application crash), cause a denial of service (stack consumption
CVE-2018-20575: Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
Key phrases: undocumented system_firmwarel.stm uri
CVE-2018-20576: Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone calls to an attacker-specified telephone number. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
Key phrases: arbitrary outbound telephone calls to an attacker-, cgi-bin autodialing.exe, cgi-bin phone_test.exe csrf
CVE-2018-20577: Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
Key phrases: Firmware 01.11.2017-11:43:44, csrf
CVE-2018-20578: An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehttpurl.c mishandles URLs longer than hostlen bytes (in the webclient, this is set by default to 40), leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx response.
Key phrases: infinite loop, attack vector
CVE-2018-20579: Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' character.
Key phrases: an out-of-bounds write of, stack-based buffer overflow, stack based buffer overflow, out of bounds write
CVE-2018-20580: The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
Key phrases: execute arbitrary Java code, execute arbitrary Java code via a crafted request
CVE-2018-20582: The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery.
Key phrases: cross site request forgery
CVE-2018-20583: Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing javascript as javascri%0apt).
Key phrases: insert unsafe URLs into HTML (even if, cross-site scripting (xss)
CVE-2018-20584: JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
Key phrases: denial of service (application hang), cause a denial of service (application hang
CVE-2018-20586: bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
Key phrases: injection of arbitrary data into the debug log
CVE-2018-20587: Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.
Key phrases: incorrect access control, steal currency
CVE-2018-20588: lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read.
Key phrases: buffer over-read, buffer over read
CVE-2018-20589: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.
Key phrases: xss
CVE-2018-20590: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.
Key phrases: xss
CVE-2018-20591: A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx.
Key phrases: heap-based buffer over-read, segmentation faults, denial-of-service, buffer over read, denial of service
CVE-2018-20592: In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc.
Key phrases: use-after-free, denial-of-service, use after free, denial of service
CVE-2018-20593: In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2018-20594: An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
Key phrases: reflected xss
CVE-2018-20595: A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
Key phrases: csrf issue
CVE-2018-20596: Jspxcms v9.0.0 allows SSRF.
Key phrases: SSRF, ssrf
CVE-2018-20597: UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.
Key phrases: xss
CVE-2018-20598: UCMS 1.4.7 has ?do=user_addpost CSRF.
Key phrases: csrf
CVE-2018-20599: UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by entering this code
CVE-2018-20600: sadmin\\\\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.
Key phrases: xss
CVE-2018-20601: UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.
Key phrases: xss
CVE-2018-20602: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.
Key phrases: full path disclosure via the /install.php?s=/1 URI
CVE-2018-20603: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.
Key phrases: admin.php?s=/Member/add.html CSRF, csrf
CVE-2018-20604: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt file.
Key phrases: read the 1.txt file, directory traversal
CVE-2018-20605: imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by using root/
CVE-2018-20606: imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.
Key phrases: full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI
CVE-2018-20607: imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.
Key phrases: obtain potentially sensitive debugging information, obtain potentially sensitive debugging information via the root
CVE-2018-20608: imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.
Key phrases: read phpinfo output via the root/tools
CVE-2018-20609: imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.
Key phrases: obtain potentially sensitive configuration information, obtain potentially sensitive configuration information via the root
CVE-2018-20610: imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.
Key phrases: directory traversal via the root/run/
CVE-2018-20611: imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
Key phrases: the root/tools/adbug/binfo.php?cookie, xss
CVE-2018-20612: UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.
Key phrases: index.php?g=admin&c=admin&a=add_admin_do CSRF, csrf
CVE-2018-20613: TEMMOKU T1.09 Beta allows admin/user/add CSRF.
Key phrases: admin/user/add CSRF, csrf
CVE-2018-20614: public\\\\install\\\\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI.
Key phrases: reload the product via the public/install/#/step3
CVE-2018-20615: An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.
Key phrases: out-of-bounds read issue, crash, out of bounds read
CVE-2018-20616: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2018-20617: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2018-20618: ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2018-20621: An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.
Key phrases: be run as NT AUTHORITY/SYSTEM, local privilege escalation, binary planting, insecure permissions
CVE-2018-20622: JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Key phrases: memory leak
CVE-2018-20623: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.
Key phrases: use-after-free, use after free
CVE-2018-20626: PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
Key phrases: directory traversal
CVE-2018-20627: PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.
Key phrases: html injection
CVE-2018-20628: PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
Key phrases: directory traversal via a direct request for a
CVE-2018-20629: PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
Key phrases: directory traversal
CVE-2018-20630: PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
Key phrases: directory traversal
CVE-2018-20631: PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
Key phrases: full Path Disclosure via a request for an, path disclosure
CVE-2018-20632: PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
Key phrases: cross-site scripting (xss)
CVE-2018-20633: PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
Key phrases: cross-site request forgery (csrf)
CVE-2018-20634: PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.
Key phrases: denial of service (changed Page structure), cause a denial of service (changed Page
CVE-2018-20635: PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
Key phrases: directory traversal
CVE-2018-20636: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
Key phrases: html injection
CVE-2018-20637: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
Key phrases: denial of service (unrecoverable blank profile), cause a denial of service (unrecoverable blank
CVE-2018-20638: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
Key phrases: directory traversal
CVE-2018-20639: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.
Key phrases: html injection
CVE-2018-20640: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.
Key phrases: cross-site scripting (xss)
CVE-2018-20641: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
Key phrases: cross-site request forgery (csrf)
CVE-2018-20642: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.
Key phrases: denial of service (outage of profile editing), cause a denial of service (outage of
CVE-2018-20643: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
Key phrases: directory traversal
CVE-2018-20644: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
Key phrases: cross-site request forgery (csrf)
CVE-2018-20645: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
Key phrases: html injection
CVE-2018-20646: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
Key phrases: directory traversal
CVE-2018-20647: PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.
Key phrases: directory traversal
CVE-2018-20648: PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.
Key phrases: cross-site request forgery (csrf)
CVE-2018-20650: A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
Key phrases: cause a denial of service due to the
CVE-2018-20651: A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.
Key phrases: cause a denial of service, null pointer dereference
CVE-2018-20652: An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception.
Key phrases: excessive memory allocation, denial-of-service, denial of service
CVE-2018-20655: When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.
Key phrases: stack-based overflow, stack based overflow
CVE-2018-20657: The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.
Key phrases: denial of service (memory consumption), memory leak
CVE-2018-20658: The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command.
Key phrases: denial of service (daemon crash), cause a denial of service (daemon crash
CVE-2018-20659: An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp, as demonstrated by mp42hls.
Key phrases: memory allocation
CVE-2018-20662: In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
Key phrases: cause a denial-of-service (, denial of service, application crash
CVE-2018-20663: The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.
Key phrases: persistent xss
CVE-2018-20664: Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
Key phrases: xxe
CVE-2018-20669: An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
Key phrases: overwrite arbitrary kernel memory, denial of service, privilege escalation
CVE-2018-20671: load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.
Key phrases: integer overflow, heap-based buffer overflow, heap based buffer overflow
CVE-2018-20673: The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
Key phrases: integer overflow, heap-based buffer overflow, heap based buffer overflow
CVE-2018-20674: D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.
Key phrases: authenticated remote command execution
CVE-2018-20675: D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.
Key phrases: authentication bypass
CVE-2018-20676: In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
Key phrases: xss
CVE-2018-20677: In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Key phrases: xss
CVE-2018-20678: LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.
Key phrases: SQL injection via the html/ajax_table.php sort[hostname, sql injection, exploitable
CVE-2018-20679: An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.
Key phrases: leak sensitive information from the stack by sending, out of bounds read
CVE-2018-20680: Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.
Key phrases: xss
CVE-2018-20681: mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices (such as additionally attached graphical outputs via HDMI, VGA, DVI, etc.) the content of a screensaver-locked session can be revealed. In some scenarios, the attacker can execute applications, such as by clicking with a mouse.
Key phrases: view screen content and possibly control applications
CVE-2018-20682: Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).
Key phrases: stored XSS via the private/en/, stored xss
CVE-2018-20683: commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.
Key phrases: have a "bad" impact by triggering, bad impact
CVE-2018-20684: In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.
Key phrases: accept arbitrary files
CVE-2018-20685: In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
Key phrases: bypass intended access restrictions, bypass intended access restrictions via the filename of, empty filename, target directory
CVE-2018-20687: An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Key phrases: read arbitrary files, read arbitrary files or conduct server-side, xml external entity (xxe), server-side request forgery (ssrf), server side request forgery
CVE-2018-20698: The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.
Key phrases: URL injection for login redirects on the login, url injection
CVE-2018-20699: Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.
Key phrases: denial of service (dockerd memory consumption), cause a denial of service (dockerd memory
CVE-2018-20703: CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.
Key phrases: reflected xss
CVE-2018-20712: A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.
Key phrases: heap-based buffer over-read, segmentation faults, denial-of-service, buffer over read, denial of service
CVE-2018-20713: Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.
Key phrases: SQL Injection by remote authenticated users, sql injection
CVE-2018-20714: The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin.
Key phrases: certain privilege checks not being in place, file deletion, escalate privilege
CVE-2018-20715: The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter() method in core/oxconfig.php.
Key phrases: sql injection
CVE-2018-20716: CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
Key phrases: sql injection
CVE-2018-20717: In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher privileges. The attacker can then inject arbitrary PHP objects into the process and abuse an object chain in order to gain Remote Code Execution. This occurs because protection against serialized objects looks for a 0: followed by an integer, but does not consider 0:+ followed by an integer.
Key phrases: inject arbitrary PHP, gain Remote Code Execution, object chain, remote code execution
CVE-2018-20718: In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a "public link" of a file, or access to any unprivileged user account for creation of such a link.
Key phrases: php object injection
CVE-2018-20719: In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Key phrases: sql injection
CVE-2018-20720: ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service (reboot) via a reboot command in an SPA message.
Key phrases: denial of service (reboot), cause a denial of service (reboot)
CVE-2018-20721: URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[::44.1" address.
Key phrases: out-of-bounds read, out of bounds read
CVE-2018-20723: A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color.
Key phrases: cross-site scripting (xss)
CVE-2018-20724: A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors.
Key phrases: cross-site scripting (xss)
CVE-2018-20725: A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label.
Key phrases: cross-site scripting (xss)
CVE-2018-20726: A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.
Key phrases: cross-site scripting (xss)
CVE-2018-20727: Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.
Key phrases: execute code on the server side via the, command injection
CVE-2018-20728: A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php.
Key phrases: escalate privileges via User-Management.php, cross site request forgery (csrf)
CVE-2018-20729: A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected cross site scripting (xss)
CVE-2018-20730: A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component.
Key phrases: execute arbitrary SQL, execute arbitrary SQL read commands via the query.php, sql injection
CVE-2018-20731: A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via User-Chat.php, stored cross site scripting (xss)
CVE-2018-20732: SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
Key phrases: execute arbitrary code, execute arbitrary code via a Java deserialization variant, java deserialization variant
CVE-2018-20733: BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.
Key phrases: XXE, xxe
CVE-2018-20735: An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and escalation of privilege inside a Windows Active Directory environment. It was found that by default the PatrolCli / PATROL Agent application only verifies if the password provided for the given username is correct; it does not verify the permissions of the user on the network. This means if you have PATROL Agent installed on a high value target (domain controller), you can use a low privileged domain user to authenticate with PatrolCli and then connect to the domain controller and run commands as SYSTEM. This means any user on a domain can escalate to domain admin through PATROL Agent. NOTE: the vendor disputes this because they believe it is adequate to prevent this escalation by means of a custom, non-default configuration
Key phrases: authenticate with PatrolCli and then connect to the, lateral movement, escalation of privilege, escalation privilege, run commands
CVE-2018-20736: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product.
Key phrases: dom-based xss
CVE-2018-20737: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.
Key phrases: reflected xss
CVE-2018-20742: An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.
Key phrases: arbitrary enclave memory write
CVE-2018-20743: murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.
Key phrases: denial of service (daemon hang or crash), cause a denial of service (daemon hang, concurrent requests, message flood
CVE-2018-20744: The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
Key phrases: cors misconfiguration security problems
CVE-2018-20745: Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
Key phrases: cors misconfiguration security problems
CVE-2018-20748: LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
Key phrases: heap out-of-bounds write, out of bounds write
CVE-2018-20749: LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
Key phrases: heap out-of-bounds write, out of bounds write
CVE-2018-20750: LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
Key phrases: heap out-of-bounds write, out of bounds write
CVE-2018-20751: An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2018-20752: An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses an Excel macro for a username, it will not be properly sanitized when exported to a CSV file. This can result in remote code execution for the attacker.
Key phrases: a CSV file, csv injection, remote code execution
CVE-2018-20753: Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
Key phrases: execute PowerShell payloads on all managed devices
CVE-2018-20755: MODX Revolution through v2.7.0-pl allows XSS via the User Photo field.
Key phrases: XSS via the User Photo field, xss
CVE-2018-20756: MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs.
Key phrases: XSS via a document resource (such as, xss
CVE-2018-20757: MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.
Key phrases: XSS via an extended user field such as, xss
CVE-2018-20758: MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.
Key phrases: XSS via User Settings such as Description, xss
CVE-2018-20760: In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
Key phrases: an out-of-bounds write because, out of bounds write
CVE-2018-20761: GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a.
Key phrases: buffer overflow
CVE-2018-20762: GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.
Key phrases: buffer overflow
CVE-2018-20763: In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking.
Key phrases: an out-of-bounds write because, out of bounds write
CVE-2018-20764: A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.
Key phrases: buffer overflow, privilege escalation
CVE-2018-20767: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.
Key phrases: remote command execution
CVE-2018-20768: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.
Key phrases: writable file
CVE-2018-20769: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.
Key phrases: local file inclusion
CVE-2018-20770: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection.
Key phrases: blind sql injection
CVE-2018-20771: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.
Key phrases: remote command execution
CVE-2018-20772: Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
Key phrases: the admin/?/layout/edit/1 URI, php code execution
CVE-2018-20773: Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
Key phrases: PHP code execution by visiting admin/?/page/edit/1, php code execution
CVE-2018-20774: Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
Key phrases: xss
CVE-2018-20775: admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
Key phrases: PHP code execution by creating a new .php, php code execution
CVE-2018-20776: Frog CMS 0.9.5 provides a directory listing for a /public request.
Key phrases: directory listing
CVE-2018-20777: Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
Key phrases: xss
CVE-2018-20778: admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
Key phrases: XSS by creating a new file containing a, xss
CVE-2018-20779: Traq 3.7.1 allows SQL Injection via a tickets?search= URI.
Key phrases: SQL Injection via a tickets?search= URI, sql injection
CVE-2018-20780: Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).
Key phrases: create an admin account (aka group_id=1), admin users new csrf
CVE-2018-20781: In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.
Key phrases: cleartext
CVE-2018-20782: The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.
Key phrases: ipn messages
CVE-2018-20783: In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.
Key phrases: read allocated or unallocated memory past the actual, buffer over-read, buffer over read
CVE-2018-20784: In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
Key phrases: denial of service (infinite loop in update_blocked_averages), cause a denial of service (infinite loop, unspecified other impact, high load, unspecified impact
CVE-2018-20785: Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power cycle occurs, this does not completely reset the chip: memory contents are still in place. Also, it restarts into a boot menu that enables XMODEM upload and execution of an unsigned QNX IFS system image, thereby completing the bypass of secure boot. Moreover, the attacker can craft custom IFS data and write it to unused memory to extract all memory contents that had previously been present. This includes the original firmware and sensitive information such as Wi-Fi credentials.
Key phrases: bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices, bypass of secure boot. Moreover, the attacker, Secure boot bypass, secure boot bypass, sensitive information
CVE-2018-20786: libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
Key phrases: denial of service (application crash)
CVE-2018-20787: The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbg_write in drivers/input/touchscreen/ft5x46/ft5x46_ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
Key phrases: integer overflow, oops, crash
CVE-2018-20788: drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted application for denial of service.
Key phrases: integer overflows, denial of service
CVE-2018-20789: tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
Key phrases: bypass through the delete_folder action in execute.php, path traversal mitigation bypass, delete an arbitrary directory as a consequence of
CVE-2018-20790: tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.
Key phrases: bypass through the delete_file action in execute.php, path traversal mitigation bypass, delete an arbitrary file as a consequence of
CVE-2018-20791: tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
Key phrases: XSS via a media file upload with an, xss, xss payload
CVE-2018-20792: tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.
Key phrases: read arbitrary file, read arbitrary file via path traversal with the
CVE-2018-20793: tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.
Key phrases: path traversal mitigation bypass, write to an arbitrary file as a consequence
CVE-2018-20794: tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.
Key phrases: write to an arbitrary image file (jpg, path traversal
CVE-2018-20795: tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.
Key phrases: read arbitrary files, read arbitrary files via path traversal with the
CVE-2018-20796: In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\\\227|)(\\\\\\\\1\\\\\\\\1|t1|\\\\\\\\\\\\2537)+' in grep.
Key phrases: uncontrolled recursion