1155 matches found
MiracleLinux 7 : squid-3.5.20-17.el7.9 (AXSA:2023-6569:04)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6569:04 advisory. squid: Denial of Service in HTTP Digest Authentication CVE-2023-46847 Tenable has extracted the preceding description block directly from the MiracleLinux...
curl: Digest Authentication Header Injection
Summary The Digest authentication implementation in libcurl fails to properly escape the uri parameter in the Authorization header. While other parameters like username, realm, and nonce are correctly escaped using authdigeststringquoted, the uri is inserted raw into the header. This allows an...
PT-2026-23804
Name of the Vulnerable Software and Affected Versions Libsoup affected versions not specified Description The server-side digest authentication implementation within the SoupAuthDomainDigest class does not correctly manage issued nonces or enforce the necessary incremental nonce-count nc attribut...
curl: Functional Regression in Digest Authentication: Failure to handle optional spaces and escaped quotes
Summary A recent migration of the Digest authentication parsing logic to the curlxstr strparse API introduced two functional parsing regressions in lib/vauth/digest.c. 1. Optional Whitespace OWS Handling The current implementation fails to skip optional whitespace after comma delimiters in...
TencentOS Server 2: squid (TSSA-2023:0268)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0268 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Astra Linux – Vulnerability in curl
Successfully using libcurl to perform a transfer over a specific HTTP proxy proxyA with Digest authentication. Then, changing the proxy host to another one proxyB for a second transfer, while reusing the same handle, causes libcurl to incorrectly pass the Proxy-Authorization: header field meant f...
Kentico Xperience < 13.0.173 Auth Bypass
According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.173. It is, therefore, affected by an authentication bypass vulnerability via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication...
VulnCheck KEV: CVE-2025-2746
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects...
EUVD-2008-3889
Malware in sbrugna...
EUVD-2010-0581
Malware in sbrugna...
EUVD-2008-3732
Malware in sbrugna...
EUVD-2017-0197
Malware in sbrugna...
EUVD-2013-2033
Malware in sbrugna...
EUVD-2020-7675
Malware in sbrugna...
EUVD-2014-9555
Malware in sbrugna...
EUVD-2007-2287
Malware in sbrugna...
EUVD-2025-2432
Malicious code in bioql PyPI...
EUVD-2022-4937
Malicious code in bioql PyPI...