EUVD-2024-0586

Malicious code in bioql PyPI...

EUVD-2024-28065

Malicious code in bioql PyPI...

EUVD-2022-1882

Malicious code in bioql PyPI...

EUVD-2024-52850

Malicious code in bioql PyPI...

EUVD-2022-2563

Malicious code in bioql PyPI...

EUVD-2025-21298

Malicious code in bioql PyPI...

EUVD-2022-7285

Malicious code in bioql PyPI...

EUVD-2022-39695

Malicious code in bioql PyPI...

EUVD-2021-30370

Malicious code in bioql PyPI...

EUVD-2024-41530

Malicious code in bioql PyPI...

EUVD-2024-52849

Malicious code in bioql PyPI...

EUVD-2023-51402

Malicious code in bioql PyPI...

on-headers vulnerable to http response header manipulation

...

CVE-2025-10392 Mercury KM08-708H GiGA WiFi Wave2 HTTP Header stack-based overflow

A vulnerability was detected in Mercury KM08-708H GiGA WiFi Wave2 1.1.14. This affects an unknown function of the component HTTP Header Handler. The manipulation of the argument Host results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be...

Linux Distros Unpatched Vulnerability : CVE-2023-30536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline \n into both the header names and value...

SUSE CVE-2025-40927

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some...

UBUNTU-CVE-2025-40927

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some...

PT-2025-35161

Name of the Vulnerable Software and Affected Versions: CGI::Simple versions prior to 1.282 Description: CGI::Simple contains a HTTP response splitting flaw that allows HTTP response header injection. This can be exploited to perform reflected cross-site scripting XSS, open redirect, cache...

Linux Distros Unpatched Vulnerability : CVE-2022-39369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service CAS server. The phpCAS librar...

Linux Distros Unpatched Vulnerability : CVE-2016-7965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DokuWiki 2016-06-26a and older uses $SERVERHTTPHOST instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. A remot...