1711 matches found
jwt-go allows excessive memory allocation during header parsing
golang-jwt is vulnerable to excessive memory allocation due to improper handling of the parse.ParseUnverified function. This could allow an attacker to cause significant memory consumption by sending a malicious request with an Authorization header containing many period characters...
Exploit for CVE-2025-4476
CVE-2025-4476-Exploit A small Python test client to send HTTP...
CVE-2025-11442
A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3. The impacted element is an unknown function of the component API Endpoint. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the public and may be...
CVE-2025-61776
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...
CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...
CVE-2025-61776
Dependency-Track prior to version 4.13.5 is affected by a credential leakage vulnerability where credentials intended for a private NuGet repository can be sent to api.nuget.org via the HTTP Authorization header, and names/versions of internal components can be disclosed to api.nuget.org. This sc...
CVE-2025-11284
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
EUVD-2000-0823
Malware in sbrugna...
EUVD-2013-3030
Malware in sbrugna...
EUVD-2020-5127
Malware in sbrugna...
EUVD-2021-17112
Malware in sbrugna...
EUVD-2009-0615
Malware in sbrugna...
EUVD-2021-18754
Malware in sbrugna...
EUVD-2011-5152
Malware in sbrugna...
EUVD-2018-1778
Malware in sbrugna...
EUVD-2014-0098
Malware in sbrugna...
EUVD-2014-0097
Malware in sbrugna...
EUVD-2018-0144
Malware in sbrugna...