CVE-2026-62971

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

CVE-2026-62971 OWASP CRS: XML Attribute Value Bypass

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

EUVD-2026-123614

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

CVE-2026-62971: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

PT-2026-145302

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...

Malicious code in elf-stats-joyous-toy-934 (npm)

Source: amazon-inspector 7764d43e26eb5e9dbfedfd87c9897c9db0b16a06fbbc8e325b02142f829da040 The package elf-stats-joyous-toy-934 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-illust-934 (npm)

The package @zalastax/nolb-illust-934 was found to contain malicious code. --- Credit: OpenSSF source...

MAL-2025-192074 Malicious code in elf-stats-joyous-toy-934 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7764d43e26eb5e9dbfedfd87c9897c9db0b16a06fbbc8e325b02142f829da040 The package elf-stats-joyous-toy-934 was found to contain malicious code...

EUVD-2025-200878

Malicious code in elf-stats-joyous-toy-934 npm...

Malicious code in elf-stats-joyous-toy-934 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7764d43e26eb5e9dbfedfd87c9897c9db0b16a06fbbc8e325b02142f829da040 The package elf-stats-joyous-toy-934 was found to contain malicious code...

Malicious code in @zalastax/nolb-illust-934 (npm)

The package @zalastax/nolb-illust-934 was found to contain malicious code...

Debian DSA-934-1 : pound - several vulnerabilities

Two vulnerabilities have been discovered in Pound, a reverse proxy and load balancer for HTTP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-1391 : Overly long HTTP Host: headers may trigger a buffer overflow in the addport function, which may lea...

GLD (Greylisting Daemon) Postfix Buffer Overflow

This module exploits a stack buffer overflow in the Salim Gasmi GLD use exploit/linux/misc/gld/postfix msf undefinedpostfix show actions ...actions... msf undefinedpostfix set ACTION msf undefinedpostfix show options ...show and set options... msf undefinedpostfix run This module requires...