PT-2025-13171

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations At...

PT-2025-13169

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a directory traversal problem. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoints,...

PT-2025-13168

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns an unvalidated request parameter in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13038

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Regular Expression Denial of Service in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world inciden...

Moderate: Red Hat Bug Fix Advisory: mod_proxy_cluster bug fix update

An update for modproxycluster is now available for Red Hat Enterprise Linux 9. The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Bug Fixes: Rebuild modproxycluster against httpd 2.4.62 JIRA:RHEL-70140 Rebase modproxycluster to upstream...

PT-2025-11952

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices, real-world incidents, or technical exploitation details...

PT-2025-12000

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-11685

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns an authentication bypass in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2025-11989

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-11954

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a denial of service in the Apache HTTP Server. No specific details about the technical aspects of the issue, such as API endpoints, vulnerable parameters, o...

PT-2025-11953

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-11955

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or real-wor...

PT-2025-12001

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-11999

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

libsoup security update

An update is available for libsoup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...

httpd bug fix update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

RLSA-2024:9306 Moderate: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: HTTP response splitting CVE-2023-38709 httpd: HTTP Response Splitting in multiple modules CVE-2024-24795 For more details about the security issues, including the impact, a...

Metasploit Weekly Wrap-Up 03/14/25

New module content 1 InvoiceShelf unauthenticated PHP Deserialization Vulnerability Authors: Mickaël Benassouli, Rémi Matasse, and h00die-gr3y Type: Exploit Pull request: 19950 contributed by h00die-gr3y Path: linux/http/invoiceshelfunauthrcecve202455556 AttackerKB reference: CVE-2024-55556...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2023-25193 DESCRIPTION: Harfbuzz is vulnerable to a denial of service, caused by a...

Linux Distros Unpatched Vulnerability : CVE-2021-36160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS. This issue affects Apache HTTP Server versions...