108 matches found
CVE-2026-19879
A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...
Linux Distros Unpatched Vulnerability : CVE-2026-19879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit...
CVE-2026-34767
CVE-2026-34767 affects Electron before 38.8.6, 39.8.3, 40.8.3, and 41.0.3. It describes HTTP response header injection when apps register custom protocol handlers (protocol.handle / protocol.registerSchemesAsPrivileged) or modify headers via webRequest.onHeadersReceived if attacker-controlled inp...
EUVD-2018-14287
Malware in sbrugna...
EUVD-2009-2998
Malware in sbrugna...
EUVD-2005-2861
Malware in sbrugna...
EUVD-2012-4434
Malware in sbrugna...
EUVD-2018-6687
Malware in sbrugna...
EUVD-2019-8729
Malware in sbrugna...
EUVD-2018-3384
Malware in sbrugna...
EUVD-2020-17010
Malware in sbrugna...
EUVD-2024-40002
Malicious code in bioql PyPI...
EUVD-2022-5681
Malicious code in bioql PyPI...
EUVD-2021-8915
Malicious code in bioql PyPI...
EUVD-2024-27330
Malicious code in bioql PyPI...
EUVD-2024-40417
Malicious code in bioql PyPI...
CVE-2025-54956
The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request...
on-headers is vulnerable to http response header manipulation
Impact A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead Patches Users should upgrade to 1.1.0 Workarounds Uses are encouraged to upgrade to 1.1.0, but this issue can be worked around by passing an object t...
CVE-2025-7339 on-headers vulnerable to http response header manipulation
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-5184
A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP Response Header Handler. The manipulation leads to information disclosure. It is possible to launch the...