10741 matches found
JLSEC-2025-24 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow...
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...
JLSEC-2025-34 This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
JLSEC-2025-27 curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...
JLSEC-2025-26 curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to...
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header...
JLSEC-2025-29 When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...
When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again...
JLSEC-2025-25 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response...
Command Injection
figma-developer-mcp is vulnerable to Command Injection. The vulnerability is due to unsanitized input to shell metacharacters in a POST being passed to a fetchWithRetry curl command, and an unauthenticated attacker with network access can inject and execute arbitrary OS commands as the MCP proces...
AlmaLinux 10 : firefox (ALSA-2025:11797)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:11797 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...
The vulnerability of the cURL command-line utility, related to reading data beyond the buffer in memory, allows a malicious actor to cause a service failure.
The vulnerability of the command-line tool cURL relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
EUVD-2013-1936
Malware in sbrugna...
EUVD-2014-0116
Malware in sbrugna...
EUVD-2005-4072
Malware in sbrugna...
EUVD-2005-3184
Malware in sbrugna...
EUVD-2015-3229
Malware in sbrugna...
EUVD-2009-2413
Malware in sbrugna...
EUVD-2003-1595
Malware in sbrugna...
EUVD-2009-0048
Malware in sbrugna...
EUVD-2018-1896
Malware in sbrugna...