Lucene search
+L

453 matches found

OSV
OSV
added 2025/10/20 2:15 p.m.14 views

UBUNTU-CVE-2025-11677

Use After Free in WebSocket server implementation in lwshandshakeserver in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWSCALLBACKHTTPCONFIRMUPGRADE, to achieve denial of service...

6.3CVSS5.8AI score0.00377EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/10/20 1:41 p.m.17 views

CVE-2025-11677

Use After Free in WebSocket server implementation in lwshandshakeserver in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWSCALLBACKHTTPCONFIRMUPGRADE, to achieve denial of service...

6.3CVSS5.2AI score0.00377EPSS
SaveExploits0
CVE
CVE
added 2025/10/20 1:41 p.m.106 views

CVE-2025-11677

CVE-2025-11677 is a Use After Free in the warmcat libwebsockets WebSocket server (lws_handshake_server). The vulnerability triggers in configurations where a user-supplied callback handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, potentially allowing a denial-of-service. Public advisories reference aff...

6.3CVSS6.4AI score0.00377EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/17 7:46 p.m.10 views

CVE-2025-62428

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS7AI score0.00453EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/16 7:15 p.m.8 views

CVE-2025-62428

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS0.00453EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/16 6:57 p.m.7 views

EUVD-2025-34829

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6.5AI score0.00453EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/16 6:57 p.m.2 views

CVE-2025-62428 Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6.6AI score0.00453EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/16 6:57 p.m.13 views

CVE-2025-62428

CVE-2025-62428 affects Drawing-Captcha APP. A Host Header Injection vulnerability exists in /register and /confirm-email endpoints, allowing an attacker to manipulate the Host header and generate malicious email confirmation links that redirect users to attacker-controlled domains. Impact concern...

9.3CVSS6.6AI score0.00453EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/16 6:57 p.m.20 views

CVE-2025-62428 Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS0.00453EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.11 views

Drawing-Captcha APP 输入验证错误漏洞

Drawing-Captcha APP is a captcha application from Drawing Captcha open source. An input validation error vulnerability exists in Drawing-Captcha APP that stems from the presence of host header injection in the /register and /confirm-email endpoints, which could result in users being redirected to...

9.3CVSS7AI score0.00453EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/08 3:02 a.m.12 views

EUVD-2025-31857

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

6.5CVSS6.3AI score0.00327EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2010-3460

Malware in sbrugna...

4.3CVSS6.4AI score0.02966EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2007-1703

Malware in sbrugna...

4.3CVSS6.3AI score0.01982EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2008-6737

Malware in sbrugna...

5.1CVSS6.4AI score0.00884EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2018-17313

Malware in sbrugna...

7.5CVSS7.6AI score0.02465EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.7 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986535 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases...

5.5CVSS6AI score0.00246EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.5 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986930)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986930 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence :...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-12059

Malicious code in bioql PyPI...

5.9CVSS6.9AI score0.00264EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-28737

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00448EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-7631

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00939EPSS
SaveExploits0References8
Rows per page
Query Builder