PT-2025-14621 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a remote code execution vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents...

Brocade Fabric OS Remote Code Execution / Information Disclosure

Brocade Fabric OS versions prior to 9.2.2 suffer from 10 vulnerabilities including, but not limited to, remote code execution, information disclosure, man-in-the-middle, weak cryptography, and hardcoded key vulnerabilities. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Titl...

CVE-2025-1734 Streams HTTP wrapper does not fail for headers with invalid name and no colon

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

CVE-2025-1734 Streams HTTP wrapper does not fail for headers with invalid name and no colon

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...

CVE-2025-1734

CVE-2025-1734 affects PHP’s HTTP stream wrapper header parsing: headers missing a colon are treated as valid, potentially letting applications accept invalid headers. Affected branches include PHP 8.1.x before 8.1.32, 8.2.x before 8.2.28, 8.3.x before 8.3.19, and 8.4.x before 8.4.5. Mitigations/u...

CVE-2025-30221

Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available...

PT-2025-13615

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-13618

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13617

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13612

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-13613

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13611

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations At the...

CVE-2025-30221

Summary (CVE-2025-30221): Pitchfork is a Rack-based HTTP server. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used with Rack 3. The issue is fixed in Pitchfork 0.11.0. Affected: Pitchfork

PT-2025-13038

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Regular Expression Denial of Service in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world inciden...

PT-2025-13171

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about affected devices or real-world incidents are provided. Recommendations At...

PT-2025-13168

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns an unvalidated request parameter in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-13169

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a directory traversal problem. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoints,...

Moderate: Red Hat Bug Fix Advisory: mod_proxy_cluster bug fix update

An update for modproxycluster is now available for Red Hat Enterprise Linux 9. The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Bug Fixes: Rebuild modproxycluster against httpd 2.4.62 JIRA:RHEL-70140 Rebase modproxycluster to upstream...

PT-2025-12000

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-11954

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue is related to a denial of service in the Apache HTTP Server. No specific details about the technical aspects of the issue, such as API endpoints, vulnerable parameters, o...