2608 matches found
CVE-2025-11375
CVE-2025-11375 affects HashiCorp Consul and Consul Enterprise. The issue is a DoS vulnerability in the event endpoint caused by lack of a maximum value on the Content-Length header. Affected versions include Consul Community Edition up to 1.21.5 and Consul Enterprise up to 1.21.5, with fixes in C...
HashiCorp Consul和HashiCorp Consul Enterprise 安全漏洞
HashiCorp Consul and HashiCorp Consul Enterprise are both products of HashiCorp, Inc. of the U.S. HashiCorp Consul is a suite of distributed, highly available data center-aware solutions. The product is used to connect and provision applications across dynamically distributed...
HashiCorp Consul和HashiCorp Consul Enterprise 安全漏洞
HashiCorp Consul and HashiCorp Consul Enterprise are both products of HashiCorp, Inc. of the U.S. HashiCorp Consul is a suite of distributed, highly available data center-aware solutions. The product is used to connect and provision applications across dynamically distributed...
PT-2025-44204
Name of the Vulnerable Software and Affected Versions Consul versions prior to 1.22.0 Consul Enterprise versions prior to 1.22.0 Consul Enterprise version 1.21.6 Consul Enterprise version 1.20.8 Consul Enterprise version 1.18.12 Description The event endpoint in Consul and Consul Enterprise is...
PT-2025-44211
Name of the Vulnerable Software and Affected Versions Consul versions prior to 1.22.0 Consul Enterprise versions prior to 1.22.0 Consul Enterprise version 1.21.6 Consul Enterprise version 1.20.8 Consul Enterprise version 1.18.12 Description The key/value endpoint in Consul and Consul Enterprise i...
Exploit for HTTP Request Smuggling in Microsoft
CVE-2025-55315 Vulnerability Scanner and TLS Proxy This repos...
Improper Input Validation
Hono is vulnerable to improper input validation. The vulnerability is due to a flaw in the bodyLimit middleware that prioritized the Content-Length header over Transfer-Encoding: chunked, which allows an attacker to bypass the configured request body size limit and potentially cause a denial of...
Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. User Entity Behavior Analytics app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-40167 DESCRIPTION: Jetty is a Java...
CVE-2025-41706
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
CVE-2025-41706
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
CVE-2025-41706
CVE-2025-41706 affects the Phoenix Contact webserver used in the QUINT4-UPS/24DC/24DC/10/EIP family. The issue is a denial-of-service condition that an unauthenticated remote attacker can trigger by sending a specially crafted GET request with an over-long Content-Length header. The vulnerability...
CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
EUVD-2025-34148
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
PT-2025-41856
Name of the Vulnerable Software and Affected Versions Webserver affected versions not specified Description The webserver is susceptible to a denial of service condition. An unauthenticated remote attacker can exploit this by sending a specially crafted GET request with an excessively long...
EUVD-2003-1188
Malware in sbrugna...
EUVD-2014-1146
Malware in sbrugna...
EUVD-2013-2625
Malware in sbrugna...