Lucene search
+L

25235 matches found

NVD
NVD
added 2026/01/28 4:16 p.m.12 views

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS0.00246EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/28 4:16 p.m.7 views

UBUNTU-CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.9AI score0.00246EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/01/28 4:16 p.m.11 views

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS6AI score0.00246EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/28 3:15 p.m.73 views

CVE-2026-1539 Libsoup: libsoup: credential leakage via http redirects

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS0.00246EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 3:15 p.m.4 views

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/28 3:15 p.m.7 views

CVE-2026-1539 Libsoup: libsoup: credential leakage via http redirects

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/28 3:15 p.m.53 views

CVE-2026-1539

The connected IBM ACE bulletin confirms CVE-2026-1539 is a libsoup HTTP library issue: during HTTP redirects, the library removes the Authorization header but may fail to remove Proxy-Authorization when redirecting to a different host, potentially leaking proxy credentials to third-party servers....

5.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
added 2026/01/28 3:15 p.m.6 views

EUVD-2026-4889

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/01/28 3:15 p.m.19 views

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.5AI score0.00246EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/28 3:15 p.m.9 views

CVE-2026-1539

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different...

5.8CVSS5.7AI score0.00246EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/28 8:45 a.m.222 views

Exploit for Server-Side Request Forgery in Microsoft

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-C...

9.8CVSS6.2AI score0.99996EPSS
SaveExploits67
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.14 views

libsoup security vulnerabilities

Libsoup is a GNOME project’s HTTP client/server library. Libsoup has a security vulnerability that stems from failing to remove the Proxy-Authorization header when handling HTTP redirection, which may lead to the exposure of proxy credentials...

5.8CVSS6AI score0.00246EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/01/28 12:00 a.m.10 views

The vulnerability of the FortiCloud SSO authentication mechanism affects operating systems based on FortiOS, the Fortinet FortiManager device management software, the FortiAnalyzer event monitoring and analysis software, and the FortiProxy proxy server used for protecting against internet attacks. This vulnerability allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the FortiCloud SSO authentication mechanism affects operating systems based on FortiOS, the Fortinet FortiManager device management software, the FortiAnalyzer event monitoring and analysis software, and the FortiProxy proxy server used for protecting against internet attacks...

10CVSS7.1AI score0.86088EPSS
SaveExploits0References3Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-1539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects...

5.8CVSS6.1AI score0.00246EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/27 4:16 p.m.11 views

CVE-2020-36949

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

6.7CVSS6AI score0.00446EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/27 4:16 p.m.19 views

CVE-2020-36949

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

7.5CVSS0.00446EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/27 3:23 p.m.26 views

CVE-2020-36949

CVE-2020-36949 affects TapinRadio 2.13.7. A denial-of-service vulnerability exists in the application proxy settings: processing oversized input in username and address fields (reported with a 20,000-character buffer) can cause the program to become unresponsive and require reinstallation. The av...

7.5CVSS6AI score0.00446EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.9 views

CVE-2020-36949

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

7.5CVSS6AI score0.00446EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/01/27 3:23 p.m.15 views

EUVD-2020-30864

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

7.5CVSS6AI score0.00446EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/27 3:23 p.m.4 views

CVE-2020-36949 TapinRadio 2.13.7 - Denial of Service

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

7.5CVSS6AI score0.00446EPSS
SaveExploits1References3
Rows per page
Query Builder