PT-2026-93946

A Server-Side Request Forgery vulnerability exists in sat proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and passes it to curl setoptCURLOPT URL without host or scheme validation. An unauthenticated remote attacker can leverage this to...

CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

PT-2026-82635

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the CURLOPT SSLCERT option --cert with the command line tool.When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certifica...

PT-2026-40992

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPT READFUNCTION to ask for data to send, even when the CURLOPT POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...

PT-2026-41004

An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPT READFUNCTION to ask for data to send, even when the CURLOPT POSTFIELDS option has been set, if the same handle previously wasused to issue a PUT reques...

PT-2026-40986

libcurl provides the CURLOPT CERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation...

PT-2025-46002

An authentication bypass vulnerability exists in libcurl 8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain...

PT-2025-46001

An authentication bypass vulnerability exists libcurl 8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT GSSAPI DELEGATION option. This vulnerability affects...

PT-2023-2924

Name of the Vulnerable Software and Affected Versions curl versions prior to 8.1.0 Description An information disclosure issue exists when doing HTTPS transfers, where libcurl might erroneously use the read callback CURLOPT READFUNCTION to ask for data to send, even when the CURLOPT POSTFIELDS...

PT-2023-2344

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 8.0.0 Description An authentication bypass issue exists in the connection reuse feature of libcurl, affecting krb5/kerberos/negotiate/GSSAPI transfers. This is due to a failure to check for changes in the CURLOPT GSSA...

PT-2021-3530

Name of the Vulnerable Software and Affected Versions curl versions 7.7 through 7.76.1 Description The issue is related to the -t command line option, known as CURLOPT TELNETOPTIONS in libcurl, which is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for...

PT-2020-6196

Name of the Vulnerable Software and Affected Versions curl versions 7.41.0 through 7.73.0 Description The issue is related to an improper check for certificate revocation due to insufficient verification of the OCSP response. This allows an attacker to provide a fraudulent OCSP response,...

PT-2020-6181

Name of the Vulnerable Software and Affected Versions curl versions 7.21.0 through 7.73.0 Description The issue is related to uncontrolled recursion due to a stack overflow problem in FTP wildcard match parsing, which can lead to a Denial-Of-Service. This occurs when a callback set with CURLOPT...

PT-2020-3019

Name of the Vulnerable Software and Affected Versions curl versions 7.62.0 through 7.70.0 Description The issue is related to errors in handling credentials, which can lead to a partial password being leaked over the network and to the DNS servers. This occurs when libcurl is tricked into...

PT-2019-4031

Name of the Vulnerable Software and Affected Versions libcurl versions 7.52.0 through 7.65.3 Description The issue is related to a double-free vulnerability in the FTP-kerberos code. This vulnerability can be exploited by a remote attacker to gain access to confidential data, compromise data...

PT-2018-8862

Name of the Vulnerable Software and Affected Versions curl versions 7.54.1 through 7.60.0 Description The issue is related to a heap-based buffer overflow in the Curl smtp escape eob function when curl transmits data over SMTP with certain settings, such as a nonstandard --limit-rate argument or...

PT-2018-1158

Name of the Vulnerable Software and Affected Versions curl versions 7.12.3 through 7.58.0 Description A buffer overflow exists in the FTP URL handling of curl, allowing an attacker to cause a denial of service or worse. The vulnerability is triggered when curl is told to work on an FTP URL with t...

PT-2016-7523

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.51.0 Description The base64 encode function in curl is prone to a buffer being under allocated in 32-bit systems if it receives a large input, at least 1Gb, via CURLOPT USERNAME. This issue occurs due to the...

PT-2014-5462

Name of the Vulnerable Software and Affected Versions libcurl versions 7.17.1 through 7.38.0 Description The issue arises when using the CURLOPT COPYPOSTFIELDS option for HTTP POST transfers with libcurl. This option allows specifying a memory area holding the data to send to the remote server...

PT-2014-4788

Name of the Vulnerable Software and Affected Versions Claws Mail versions prior to 3.10.0 Description The issue makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM attacks by disabling the CURLOPT SSL VERIFYHOST check for CN or SAN host name fields in the feed...