Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 1:28 a.m.1 views

CVE-2026-26275

httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in httpsig-hyper prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's matches! macro. Specifically, the comparison if matches!digest, expecteddigest treate...

7.5CVSS5.6AI score0.0002EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 9:25 p.m.21 views

CVE-2026-26275 httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass

httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in httpsig-hyper prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's matches! macro. Specifically, the comparison if matches!digest, expecteddigest treate...

7.5CVSS0.0002EPSS
Exploits0References5
OSV
OSV
added 2026/02/19 9:25 p.m.0 views

CVE-2026-26275 httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass

httpsig-hyper is a hyper extension for http message signatures. An issue was discovered in httpsig-hyper prior to version 0.0.23 where Digest header verification could incorrectly succeed due to misuse of Rust's matches! macro. Specifically, the comparison if matches!digest, expecteddigest treate...

7.5CVSS5.7AI score0.0002EPSS
Exploits0References7
CVE
CVE
added 2026/02/19 9:25 p.m.9 views

CVE-2026-26275

The CVE affects httpsig-hyper up to version 0.0.22, where Digest header verification could incorrectly succeed due to a misuse of Rust’s matches! macro, causing digest checks to pass even when the computed digest did not match the expected value. This could allow message body modifications to go ...

7.5CVSS5.6AI score0.0002EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

httpsig-rs 安全漏洞

httpsig-rs is a Rust library developed by Jun Kurihara. Versions of httpsig-rs prior to 0.0.23 contained security vulnerabilities. These vulnerabilities stemmed from the misuse of the Digest header validation mechanism’s matches! macro, which could potentially allow incorrect validation successes...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/17 12:0 a.m.4 views

PT-2026-20344

Name of the Vulnerable Software and Affected Versions httpsig-hyper versions prior to 0.0.23 Description The httpsig-hyper library contains an issue where Digest header verification could incorrectly succeed due to an incorrect use of Rust’s matches! macro. The comparison if matches!digest,...

7.5CVSS5.5AI score0.0002EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/03/10 12:0 a.m.1 views

picklescan 数据伪造问题漏洞

picklescan is a security scanning program by the individual developer Matthieu Maitre. A data forgery issue vulnerability exists in picklescan versions prior to 0.0.23, which stems from a ZIP file manipulation that may cause a crash, thereby bypassing malicious payload detection...

6.5CVSS8.7AI score0.00144EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/31 12:0 a.m.2 views

PT-2025-2152 · WordPress · Frictionless

Name of the Vulnerable Software and Affected Versions: Frictionless plugin for WordPress versions up to, and including, 0.0.23 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the frictionless form shortcode. This allows...

6.4CVSS9.4AI score0.00117EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/01/31 12:0 a.m.1 views

WordPress plugin Frictionless 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.2AI score0.00117EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/30 6:54 p.m.3 views

WordPress Frictionless plugin <= 0.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Frictionless versions = 0.0.23...

6.4CVSS5.7AI score0.00117EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/06/07 12:0 a.m.5 views

Fedora: Security Advisory for rust-uu_tee (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2024/06/02 3:39 a.m.9 views

[SECURITY] Fedora 39 Update: rust-uu_factor-0.0.23-3.fc39

factor uutils display the prime factors of each NUMBER...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/06/02 3:39 a.m.6 views

[SECURITY] Fedora 39 Update: rust-uu_link-0.0.23-4.fc39

link uutils create a hard file system link to FILE...

7.2AI score
Exploits0
Fedora
Fedora
added 2024/06/02 3:39 a.m.10 views

[SECURITY] Fedora 39 Update: rust-uu_dir-0.0.23-2.fc39

Shortcut to ls -C -b...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/06/02 3:39 a.m.13 views

[SECURITY] Fedora 39 Update: rust-uu_csplit-0.0.23-3.fc39

Csplit uutils Output pieces of FILE separated by PATTERNs to files 'xx00', 'xx01', ..., and output byte counts of each piece to standard output...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/06/02 3:39 a.m.8 views

[SECURITY] Fedora 39 Update: rust-uu_cp-0.0.23-2.fc39

cp uutils copy SOURCE to DESTINATION...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/05/26 1:29 a.m.10 views

[SECURITY] Fedora 40 Update: rust-uu_wc-0.0.23-3.fc40

wc uutils display newline, word, and byte counts for input...

7.4AI score
Exploits0
Fedora
Fedora
added 2024/05/26 1:29 a.m.8 views

[SECURITY] Fedora 40 Update: rust-uu_nl-0.0.23-3.fc40

nl uutils display input with added line numbers...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/05/26 1:29 a.m.9 views

[SECURITY] Fedora 40 Update: rust-uu_mkdir-0.0.23-3.fc40

mkdir uutils create DIRECTORY...

7.3AI score
Exploits0
Fedora
Fedora
added 2024/05/26 1:29 a.m.8 views

[SECURITY] Fedora 40 Update: rust-uu_expr-0.0.23-3.fc40

expr uutils display the value of EXPRESSION...

7.3AI score
Exploits0
Rows per page
Query Builder