requests-hardened is Vulnerable to Server-Side Request Forgery

The SSRF protection in requests-hardened prior to version 1.2.1 fails to block IP addresses within the RFC 6598 Shared Address Space 100.64.0.0/10. An attacker who can supply arbitrary URLs to requests-hardened could exploit this gap to access internal services hosted within 100.64.0.0/10. This i...

CVE-2026-2001

creationtimestamp| type| source ---|---|--- 2026-02-16 21:00:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meywyyysql2o 2026-02-16 21:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116082318733803629 2026-02-16 22:33:00+00:00| seen|...

CVE-2001-1465

SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements...

CVE-2001-1557

Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges...

CVE-2001-1548

ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...

CVE-2001-1532

WebX stores authentication information in the HTTPREFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions...

CVE-2001-1510

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server JWS, and possibly other web servers allows remote attackers to read arbitrary files and directories by appending 1 "%3f.jsp", 2 "?.jsp" or 3 "?" to the requested URL...

CVE-2001-1518

RunAs runas.exe in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service RunAs hang by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the...

VulnCheck KEV: CVE-2025-22214

Landray EIS 2001 through 2006 allows Message/fimessagereceiver.aspx?replyid= SQL injection...

EUVD-2018-8786

Malware in sbrugna...

EUVD-2001-1540

Malware in sbrugna...

EUVD-2001-0473

Malware in sbrugna...

EUVD-2001-0918

Malware in sbrugna...

EUVD-2002-0396

Malware in sbrugna...

EUVD-2011-5260

Malware in sbrugna...

EUVD-2005-1041

Malware in sbrugna...

EUVD-2012-1842

Malware in sbrugna...

EUVD-2002-1013

Malware in sbrugna...

EUVD-2002-0674

Malware in sbrugna...

EUVD-2001-1063

Malware in sbrugna...