7892 matches found
CVE-2025-47909 Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf
Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks. After the CVE-2025-24358 fix, a network attacker that places a form at http://example.com can't get it to submit to https://example.com because the Origin...
CVE-2025-47909
The CVE-2025-47909 entry describes a CSRF vulnerability in gorilla/csrf related to how TrustedOrigins can permit both HTTP and HTTPS origins. Affected component: gorilla/csrf (Go web middleware). Root cause: Origin/Trust logic allows a host listed in TrustedOrigins to bypass same-origin checks, e...
PT-2025-35244
Name of the Vulnerable Software and Affected Versions: Go affected versions not specified Description: Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, potentially enabling network attackers to perform Cross-Site Request Forgery CSRF attacks. Following...
Malicious code in https-proxy-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41670 Malicious code in easy-https (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in easy-https (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-55616
creationtimestamp| type| source ---|---|--- 2025-08-27 13:42:21+00:00| seen| https://gist.github.com/livepwn/54d5829ae0a89d7a42a9c69ef8bb4a26 2025-10-05 14:37:04+00:00| seen| https://sploitus.com/exploit?id=DC1E571F-0A31-5CD6-AF19-CF3299EADB59&utmsource=rss&utmmedium=rss 2025-10-05 14:37:04+00:00...
GHSA-V6H2-P8H4-QCJW
creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:08+00:00| seen| https://gist.github.com/bsudek/980cc636266f98d8f7765e1c27dff049...
CVE-2025-9526
creationtimestamp| type| source ---|---|--- 2025-08-27 13:09:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115100886714680020...
Linux Distros Unpatched Vulnerability : CVE-2025-30194
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illega...
Server-side Request Forgery (SSRF)
Overview request-filtering-agent is an An https.Agent implementation that block request Private IP address. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the HTTPS request handling process. An attacker can access internal services by sending specially...
CVE-2025-57814 request-filtering-agent SSRF Bypass via HTTPS Requests
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...
CVE-2025-51502
creationtimestamp| type| source ---|---|--- 2025-08-25 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxavjkvyyz2n...
CVE-2025-54489
creationtimestamp| type| source ---|---|--- 2025-08-25 16:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxahlxbx372d 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-29524
creationtimestamp| type| source ---|---|--- 2025-08-25 14:40:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115089922710164590...
CVE-2025-9394
creationtimestamp| type| source ---|---|--- 2025-08-24 18:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx6536s6k42w...
CVE-2025-51501
creationtimestamp| type| source ---|---|--- 2025-08-23 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulrprlq2m...
CVE-2025-57800
creationtimestamp| type| source ---|---|--- 2025-08-22 20:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzbgorvgu2q...