35 matches found
CVE-2024-5483
creationtimestamp| type| source ---|---|--- 2026-02-07 19:20:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-5483.yaml 2026-02-08 21:02:56+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meetgdnlbe2k...
MiracleLinux 8 : go-toolset:rhel8 (AXSA:2024-8389:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8389:01 advisory. golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 golang: net/http/cookiejar: incorrect forwarding of...
MiracleLinux 9 : podman-4.6.1-5.el9 (AXSA:2023-6760:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6760:07 advisory. golang: html/template: improper handling of JavaScript whitespace CVE-2023-24540 net/http, golang.org/x/net/http2: avoid quadratic complexity in HPA...
Oracle Business Intelligence Publisher (OAS) (October 2025 CPU)
The 7.6.0.0.0, and 8.2.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...
CVE-2019-25152
creationtimestamp| type| source ---|---|--- 2025-10-07 04:55:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-25152.yaml 2025-10-08 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk24lglz2i...
EUVD-2019-0325
Malware in sbrugna...
EUVD-2019-0209
Malware in sbrugna...
EUVD-2018-0565
Malware in sbrugna...
EUVD-2019-0230
Malware in sbrugna...
EUVD-2022-24990
Malicious code in bioql PyPI...
RLSA-2025:10672 Moderate: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score,...
CVE-2019-10251
The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files related to libpicsel, which allows MITM attacks...
CVE-2024-13630
creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5464 2025-02-26 06:25:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5464 2026-02-07 03:40:08+00:00| confirmed|...
Updated git-lfs packages fix security vulnerability
Git LFS permits exfiltration of credentials via crafted HTTP URLs. CVE-2024-53263...
PT-2025-4241 · Oracle · Oracle E-Business Suite +1
Name of the Vulnerable Software and Affected Versions: Oracle Project Foundation versions 12.2.3 through 12.2.13 Description: The issue is related to the Technology Foundation component of Oracle Project Foundation in Oracle E-Business Suite. It can be easily exploited by an attacker with reduced...
CVE-2024-49820 IBM Security Guardium Key Lifecycle Manager information disclosure
IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man i...
Debian dla-3970 : python3-twisted - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3970 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 [email protected]...
Request Smuggling
Apache Traffic Server is vulnerable to Request Smuggling. The vulnerability is caused due to the server sending malformed HTTP chunked trailer section to origin servers...
Security Bulletin: IBM Aspera Console has addressed multiple HTTP vulnerabilities (CVE-2022-43841, CVE-2024-24795, CVE-2023-38709)
Summary This Security Bulletin addresses security vulnerabilities related to HTTP responses that would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information CVE-2022-43841, CVE-2024-24795, CVE-2023-38709...
RLSA-2024:1444 Important: nodejs:16 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks CVE-2024-22019 nodejs: HTTP/2: Multiple HTTP/2 enabled...