122075 matches found
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2020-5895
creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/882 2026-08-06 00:00:51+00:00| exploited| https://t.me/timcorehacking/882...
GHSA-JM22-3W23-5Q7W
creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...
CVE-2026-70590
creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
OpenStack Swift (through 2.38.0) is affected by a vulnerability in the S3API middleware where presigned URL requests do not ensure that semantic x-amz-* headers are covered by the SigV4 signature. An attacker with a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, triggering a s...
EUVD-2026-53049
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2019-12874
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/516 2026-08-06 00:00:48+00:00| seen| https://t.me/timcorehacking/516...
CVE-2019-16941
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/642 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/642 2026-10-07 01:36:05+00:00| seen| https://gist.github.com/linkerlin/be26e88a54ac8d95fc758089718d7c20...
CVE-2019-1290
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/604 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/604 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen|...
CVE-2019-10965
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/498 2026-08-06 00:00:48+00:00| seen| https://t.me/timcorehacking/498...
CVE-2020-6994
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/841 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/841...
CVE-2020-2167
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...
CVE-2020-2168
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/834...
CVE-2020-1991
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/841 2026-08-06 00:00:50+00:00| seen| https://t.me/timcorehacking/841...