54 matches found
CVE-2016-20049
JAD 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 8150 bytes to overflow the stack, overwrite return...
MiracleLinux 9 : tomcat-9.0.87-1.el9_4.1 (AXSA:2024-8150:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8150:07 advisory. Apache Tomcat: HTTP/2 header handling DoS CVE-2024-24549 Apache Tomcat: WebSocket DoS with incomplete closing handshake CVE-2024-23672 Bug Fixes and...
CVE-2025-8150
creationtimestamp| type| source ---|---|--- 2025-08-29 10:34:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjud42ckg2m...
MAL-2025-8150 Malicious code in @kollusietea/cumque-accusamus-repudiandae-similique (npm)
The package @kollusietea/cumque-accusamus-repudiandae-similique was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2014-8150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and...
CVE-2024-9951
creationtimestamp| type| source ---|---|--- 2024-10-17 10:47:13+00:00| seen| https://t.me/cvedetector/8150...
CVE-2024-8150
creationtimestamp| type| source ---|---|--- 2024-08-26 01:09:57+00:00| seen| https://t.me/cvedetector/4093...
CVE-2024-8150 ContiNew Admin user sql injection
A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...
RHEL 4 : curl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - curl: URL request injection vulnerability in parseurlandfillconn CVE-2014-8150 Note that Nessus has not tested for...
CVE-2019-8150
creationtimestamp| type| source ---|---|--- 2024-02-04 15:51:11+00:00| seen| https://t.me/ctinow/178857...
Mageia: Security Advisory (MGASA-2015-0020)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)
Summary curl is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3143 DESCRIPTION: libcurl could allow a remote attacker from within the local network to bypass security restrictions, caused by the re-use of recently...
SUSE: Security Advisory (SUSE-SU-2015:0083-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nextcloud Server 19.0.1 Encryption Vulnerability (NC-SA-2020-039)
Nextcloud Server is prone to a vulnerability where it is possible to downgrade the encryption scheme and break the integrity through known-plaintext attack. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2020-8150
creationtimestamp| type| source ---|---|--- 2020-11-09 18:55:29+00:00| seen| https://t.me/cibsecurity/16032 2020-12-26 12:38:56+00:00| published-proof-of-concept| https://t.me/cKure/3469...
CVE-2020-8150
CVE-2020-8150 relates to Nextcloud Server 19.0.1 and describes a cryptographic downgrade where an attacker can degrade the encryption scheme and break the integrity of encrypted files. Public docs indicate this vulnerability affects Nextcloud Server 19.0.1 and is discussed in the NC-SA-2020-039 a...
CVE-2019-8150
CVE-2019-8150 is a remote code execution vulnerability in Magento. It affects Magento 2.2.x before 2.2.10 and Magento 2.3.x before 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate layouts and images can insert a malicious payload into the page layout, resulting in RCE with H...
CRLF Injection
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker...
Security Bulletin: Multiple vulnerabilities in curl affect PowerKVM
Summary PowerKVM is affected by several vulnerabilities in curl. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-3613 DESCRIPTION: cURL/libcURL could allow a remote attacker to bypass security restrictions, caused by the failure to properly detect and reject domain name...