PT-2025-14617

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-14764

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to XML Entity Injection. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations At the...

PT-2025-14765 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to unvalidated user input in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents a...

PT-2025-14615 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2025-14621 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a remote code execution vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents...

Brocade Fabric OS Remote Code Execution / Information Disclosure

Brocade Fabric OS versions prior to 9.2.2 suffer from 10 vulnerabilities including, but not limited to, remote code execution, information disclosure, man-in-the-middle, weak cryptography, and hardcoded key vulnerabilities. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Titl...

CVE-2025-1734

CVE-2025-1734 affects PHP’s HTTP stream wrapper header parsing: headers missing a colon are treated as valid, potentially letting applications accept invalid headers. Affected branches include PHP 8.1.x before 8.1.32, 8.2.x before 8.2.28, 8.3.x before 8.3.19, and 8.4.x before 8.4.5. Mitigations/u...

CVE-2025-1734 Streams HTTP wrapper does not fail for headers with invalid name and no colon

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

CVE-2025-1734 Streams HTTP wrapper does not fail for headers with invalid name and no colon

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

CVE-2025-30221

Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available...

PT-2025-13615

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-13618

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13611

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations At the...

PT-2025-13613

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13612

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-13617

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

CVE-2025-30221

Summary (CVE-2025-30221): Pitchfork is a Rack-based HTTP server. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used with Rack 3. The issue is fixed in Pitchfork 0.11.0. Affected: Pitchfork

PT-2025-13169

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a directory traversal problem. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoints,...

PT-2025-13038

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Regular Expression Denial of Service in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world inciden...

PT-2025-13171

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations At...