10718 matches found
CVE-2018-16890
CVE-2018-16890 Foi encontrada uma falha de leitura fora dos limites na forma como o curl lidava com cabeçalhos do tipo 2 do NTLMv2. Ao conectar a um servidor remoto malicioso que usa autenticação NTLM, a falha poderia fazer o curl travar. Um script simples para verificar o seu curl...
CVE-2025-31161
Exploit CVE-2025-31161 INSTALLAZIONE 1. root@kitploit: git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. Modalità di utilizzo root@kitploit: sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD oppure 1. Dipende dalla libreria lcurl...
CVE-2023-38545
CVE-2023-38545: कर्ल भेद्यता प्रूफ ऑफ कॉन्सेप्ट इस रिपॉजिटरी में CVE-2023-38545 भेद्यता के लिए सिस्टम का परीक्षण करने के लिए डिज़ाइन किया गया एक प्रूफ ऑफ कॉन्सेप्ट PoC शामिल है। यह भेद्यता कर्ल उपयोगिता को प्रभावित करती है, विशेष रूप से संस्करण 7.69.0 और 8.3.1 के बीच, और HTTP रीडायरेक्ट के हैंडलि...
explain-my-curl
explain-my-curl explain-my-curl ist ein primär lokales CLI zum Verständnis dessen, was ein curl-Befehl über DNS, TLS und HTTP tut. Dieses Repository enthält derzeit: Ein CLI-Befehl zum Parsen und Erklären einer curl-Eingabe Eine Starter-TUI zur interaktiven Erkundung Ausführungstelemetrie für DNS...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:3798-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3798-1 advisory. - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-5773: wrong reuse of SMB...
curl: 46: `--libcurl` output carries `--insecure` across `--next` boundaries
Summary When --libcurl generates C source for a command that uses --next to separate multiple operations, local options from earlier operations leak into later ones. Specifically, if the first operation uses --insecure and the second does not, the generated program silently skips TLS certificate...
snuffleupagus
Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...
httpstat
httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...
httpstat
httpstat httpstat visualizza le statistiche di curl1 in modo bello e chiaro. È uno script Python a file unico🌟 che non ha dipendenze👏 ed è compatibile con Python 3🍻. Caratteristiche Bell'output nel terminale — suddivisione dei tempi di DNS, TCP, TLS, elaborazione del server e trasferimento del...
ROOT-OS-ALPINE-320-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root
Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root
Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root
Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root
Root has patched CVE-2026-9079 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
CVE-2021-26084
CVE-2021-26084 Verificador em massa de uma linha para o Atlassian Confluence CVE-2021-26084 cat confluenceservers.txt | while read host do; do curl --connect-timeout 10 --max-time 60 --path-as-is --silent --insecure --user-agent "Mozilla/5.1 Windows NT 6.1; Win64; x64; rv:59.0 Gecko/20100101...
USN-8670-2 curl vulnerability
USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. Thi...
CVE-2022-44877
CVE-2022-44877 Panoramica Questo script bash viene utilizzato per testare la vulnerabilità dei server web a CVE-2022-44877. Lo script esegue una richiesta curl verso un URL target con un payload codificato in base64. Se il target è vulnerabile alla vulnerabilità CVE-2022-44877, il tempo trascorso...
curl: ARG_CLEAR credential scrubbing wipes only UTF-8 copies on Windows Unicode builds
cleanarg operates on char str, which is the UTF-8 copy allocated by converttchartoUTF8. It has no reference to the original wchart argv element. c / toolgetparam.c:632 / static void cleanargchar str / now that getstr has copied the contents of nextarg, wipe the next argument out so that the...