191 matches found
CVE-2025-3875
creationtimestamp| type| source ---|---|--- 2025-05-14 17:32:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16352 2026-04-13 17:55:39+00:00| seen| Telegram/4Vx4R6xou6qXHv3AbtTLRrpL9hIHAaokGjUtgj9B731Cf0 2026-08-04 13:00:22+00:00| seen| https://t.me/cyberoknews/97 2026-08-05 00:00:37+00:00|...
CVE-2025-3875
Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an invalid value "Spoofed Name ", Thunderbird treats [email protected] as the actual address. This vulnerability was fixed ...
CVE-2024-3875
The CVE-2024-3875 issue affects Tenda F1202 devices, specifically the fromNatlimit function in the /goform/Natlimit file (version 1.2.0.20(408)). The vulnerability is a stack-based buffer overflow triggered by manipulating the page parameter, allowing remote exploitation. Impact is stated as incl...
CVE-2014-3875
creationtimestamp| type| source ---|---|--- 2024-02-28 17:07:36+00:00| seen| https://t.me/ctinow/195669...
BELL-CVE-2021-3875 CVE-2021-3875 does not affect BellSoft software
Bulletin has no description...
CVE-2023-3875 Campcodes Beauty Salon Management System del_feedback.php sql injection
A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delfeedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2023-3875
CVE-2023-3875 affects Campcodes Beauty Salon Management System v0.1.0. The vulnerability exists in /admin/del_feedback.php where the id parameter can be manipulated to perform SQL injection. The issue is exploitable remotely, with public disclosure of exploits noted in multiple sources. Impact pe...
Cisco Nexus 7000 Series Switches Access-Control Filtering Mechanisms Bypass (CVE-2017-3875)
An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list ACL on the affected system. More...
Debian: Security Advisory (DLA-68-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-2240-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K92930514: GO vulnerability CVE-2016-5386
Security Advisory Description The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote...
K51663510: Apache Tomcat vulnerability CVE-2016-5388
Security Advisory Description Apache Tomcat through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect ...
CVE-2022-3875
Affected software: Click Studios Passwordstate and Passwordstate Browser Extension Chrome. CVE-2022-3875 describes an authentication bypass in the API caused by issues in the API code (unknown code path) that can be exploited remotely. The vulnerability is exploitable by an unauthenticated remote...
Improper Access Control in Apache Tomcat
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...
EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-1389)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3875, CVE-2021-3903, CVE-2021-3927,...
EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2022-1415)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3875, CVE-2021-3903, CVE-2021-3927,...
HTTP Proxy header vulnerability
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...
GHSA-M6CH-GG5F-WXX3 HTTP Proxy header vulnerability
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1217)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1236)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...