Fluture Node 输入验证错误漏洞

Fluture Node is a Fp style Http and streaming processing tool based on Fluture. Fluture Node suffers from a security vulnerability that stems from the fact that if the target server redirects a request to a third-party domain name server, the header will be included in subsequent requests and...

CVE-2021-20585

IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system. IBM X-Force ID: 199398...

CVE-2020-11021

CVE-2020-11021 (Actions Http-Client) : The npm package @actions/http-client, prior to version 1.0.8, can disclose the Authorization header when a request with an Authorization header is redirected (302) to a different domain. The issue arises during redirects across hosts, allowing header leakage...

Joomla! 3.2.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Marktplaats: Secret Password reset key disclosed to third party site via referer in header

Hello, When any user request for new password from password reset link, and after receiving email with password reset link having secret key If he clicks on links to third party sites like Google, Ebay, etc, Then the URL containing the secret password reset KEY is exposed via the REFERRER in...

Inappropriate interpretation of mailto URL scheme by mail client software

Overview The mailto URL scheme is used to designate the Internet email address on a web page. Specifying an email address and body text using the mailto URL scheme gives a template for a mail message. Many mail clients have a function to set a field specified by the mailto URL scheme in a mail...