10517 matches found
Php-mod/curl Library <2.3.2 - Cross-Site Scripting
Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...
Malicious code in voicemail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568a31285f414d8125b5749bc8e070157ffd403ce46e46da637cc1452f99d19f package.json declares both preinstall and postinstall lifecycle scripts that invoke curl against a hardcoded webhook.site endpoint...
Malicious code in luluking3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a95cec14b778c5a61008305c1a4ee8155f777dbe02b6ae5cff25748584105ee On npm install, the package's postinstall hook runs index.js, which reconstructs a URL and shell command from String.fromCharCode char-code arrays...
Malicious code in luluking2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495a71c4dcddec545026181c7faeef59cf4c79b4816a148fb88c59c5465e8c97 On npm install, the package's postinstall hook runs index.js, which reconstructs a URL from a char-code array String.fromCharCode.apply on a numeric...
CVE-2026-69246
Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same throu...
[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Fedora 44 : curl (2026-e691fbbfe7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e691fbbfe7 advisory. - Fix trailing dot domain super cookie CVE-2026-8924 - Fix SSH improper host validation CVE-2026-9547 - Fix password leak with netrc and user in URL...
UBUNTU-CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
CVE-2026-67339 guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
CVE-2026-67339
GuzzleHTTP/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers, allowing proxy credentials to be captured in origin logs during redirects or SOCKS proxy scenarios. This affects guzzlehttp/guzzle prior to 7.14.2 and can occur when...
Security Bulletin: Multiple vulnerabilities impact AIX due to CURL libcurl (CVE-2026-10536, CVE-2026-11856, CVE-2026-8286, CVE-2026-8458, CVE-2026-8924, CVE-2026-8927, CVE-2026-8932, CVE-2026-9547).
Summary Multiple vulnerabilities in the curl/libcurl are related to use-after-free, reusing an invalid connection, bypass Public Suffix List checks, improper host key validation and invalid authorization. Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exist...
CLEANSTART-2026-QM16698 Security fixes in curl 7.65.0-r0
Package curl version 7.65.0-r0 fixes 2 vulnerabilities: CVE-2019-5435, CVE-2019-5436...
CLEANSTART-2026-NC44965 Security fixes in curl 7.74.0-r0
Package curl version 7.74.0-r0 fixes 3 vulnerabilities: CVE-2020-8284, CVE-2020-8285, CVE-2020-8286...
CLEANSTART-2026-DD34017 Security fixes in curl 7.83.1-r0
Package curl version 7.83.1-r0 fixes 6 vulnerabilities: CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27781, CVE-2022-27782...
CLEANSTART-2026-BO02042 Security fixes in curl 7.36.0-r0
Package curl version 7.36.0-r0 fixes 2 vulnerabilities: CVE-2014-0138, CVE-2014-0139...
CLEANSTART-2026-AW91084 Security fixes in curl 8.3.0-r0
Package curl version 8.3.0-r0 fixes 1 vulnerabilities: CVE-2023-38039...
CLEANSTART-2026-CC45741 Security fixes in curl 7.60.0-r0
Package curl version 7.60.0-r0 fixes 2 vulnerabilities: CVE-2018-1000300, CVE-2018-1000301...
