Metabase SQL Injection

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

Photon OS 5.0: Apache PHSA-2024-5.0-91-0422

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0422. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Haproxy PHSA-2023-5.0-91-0009

An update of the haproxy package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Containous Traefik Sensitive Information Disclosure

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-3134)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...

HTTP Request Smuggling

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to HTTP Request Smuggling in the proxy process. An attacker can access connection-scoped or internal metadata by sending requests to an application that proxies responses from an origin...

HTTP Request Smuggling

Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to HTTP Request Smuggling in the proxy process. An attacker can access connection-scoped or internal metadata by sending requests to an application that proxies responses fro...

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

HTTP Request Smuggling

Overview h2 is a Pure-Python HTTP/2 protocol implementation Affected versions of this package are vulnerable to HTTP Request Smuggling via the processing of HTTP/2 request headers containing multiple Host headers. An attacker can interfere with downstream HTTP/1.1 applications by crafting request...

HTTP Request Smuggling

Overview ngx-extended-pdf-viewer is a powerful, full-featured PDF viewer for Angular applications. Whether you're building enterprise tools or internal utilities, this library gives you the control and customization options you need, all while preserving a native-like viewing experience. Built on...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling through the CONNECT handling path and the shared backend transport. An attacker can make another client read attacker-smuggled backend output by sending an HTTP/2 or HTTP/3 CONNECT request with a body that Traefik...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling through the CONNECT handling path and the shared backend transport. An attacker can make another client read attacker-smuggled backend output by sending an HTTP/2 or HTTP/3 CONNECT request with a body that Traefik...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-2894)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine...

IBM Langflow OSS Code Execution Vulnerability (CNVD-2026-32373)

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code execution vulnerability. This vulnerability stems from improper handling of HTTP requests, allowing attackers to execute arbitrary code on the server by exploiting this...

CVE-2026-71324: Inconsistent Interpretation of HTTP Requests

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

Skia DoS

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause service interruptions using a specially created font file...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-2935)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine...

CVE-2026-9190 HTTP request smuggling in Progress MarkLogic Server

An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP...