126 matches found
CVE-2019-6340
CVE-2019-6340 仅供教育目的 运行 $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 利用 GET $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...
CVE-2018-20718
CVE-2018-20718 Esta es una prueba de concepto POC para CVE-2018-20718. Es una vulnerabilidad de inyección de objetos PHP. La vulnerabilidad afecta a todas las versiones de Pydio anteriores a la 8.2.1 y conduce a la ejecución remota de código sin autenticación. Fue descubierta originalmente por...
CVE-2026-78175 Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the withdrawmethodfield parameter of the tutorsavewithdrawaccount AJAX handler. This is due to the handler lacking any capability or role...
CVE-2026-78175: Deserialization of Untrusted Data
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the withdrawmethodfield parameter of the tutorsavewithdrawaccount AJAX handler. This is due to the handler lacking any capability or role...
CLSA-2026-1788433786 TuxCare security update for guzzlehttp/guzzle (11 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 11 CVEs. Fixed in 6.0.2-p5+tuxcare...
CLSA-2026-1788333194 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.1.0-p2+tuxcare...
CLSA-2026-1788269522 TuxCare security update for guzzlehttp/guzzle (7 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 7 CVEs. Fixed in 6.3.3-p3+tuxcare...
CVE-2026-67355
A flaw was found in guzzlehttp/guzzle. The software does not correctly enforce the "host-only" scope for cookies, which means it stores the request host in the cookie's domain field instead of restricting the cookie to the exact host. This vulnerability could allow an attacker who controls a...
CVE-2026-67339
A flaw was found in guzzlehttp/guzzle, where it fails to properly isolate Proxy-Authorization headers from origin servers when using cURL handlers. A remote attacker could exploit this vulnerability when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle misclassifies as...
CVE-2026-67354
A flaw was found in guzzlehttp/guzzle. This vulnerability, located in the RedirectMiddleware, can lead to information disclosure. When the optional allowredirects.referer setting is enabled, the middleware copies the URI fragment the portion after '' from a referring request into the generated...
CVE-2026-67353
A flaw was found in guzzlehttp/guzzle. A remote attacker can exploit this vulnerability by sending an excessive number of large 'Set-Cookie' header fields from a malicious server. This causes the application's CookieJar to store an unbounded amount of data in memory, leading to resource exhaustio...
CLSA-2026-1787819618 TuxCare security update for guzzlehttp/guzzle (3 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 3 CVEs. Fixed in 6.5.8-p3+tuxcare...
CLSA-2026-1786546010 TuxCare security update for guzzlehttp/guzzle (2 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 7.10.0-p3+tuxcare...
CLSA-2026-1786527009 TuxCare security update for guzzlehttp/psr7 (5 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...
CLSA-2026-1786346242 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.9.1-p2+tuxcare...
CLSA-2026-1785380980 TuxCare security update for guzzlehttp/guzzle (2 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 6.0.2-p4+tuxcare...
CLSA-2026-1785554486 TuxCare security update for guzzlehttp/psr7 (2 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 2 CVEs. Fixed in 1.4.2-p2+tuxcare...
CLSA-2026-1785380882 TuxCare security update for guzzlehttp/guzzle (8 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 8 CVEs. Fixed in 6.5.8-p2+tuxcare...