Lucene search
+L

17 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-31190

Malicious code in bioql PyPI...

7.7CVSS7.4AI score0.00808EPSS
SaveExploits1References4
OSV
OSV
•added 2025/04/22 4:15 p.m.•9 views

DEBIAN-CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS7.5AI score0.00808EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/22 4:15 p.m.•29 views

UBUNTU-CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS5.8AI score0.00808EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•2 views

CVE-2024-33452: Inconsistent Interpretation of HTTP Requests

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS7.4AI score0.00808EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/22 12:00 a.m.•28 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

0.00808EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•16 views

OpenResty lua-nginx-module 安全漏洞

OpenResty lua-nginx-module is an OpenResty USA open source component for integrating the Lua scripting language into Nginx servers. A security vulnerability exists in OpenResty lua-nginx-module v0.10.26 and earlier versions, which stems from a specially crafted HEAD request that results in an...

7.7CVSS7.1AI score0.00808EPSS
SaveExploits1References3
OSV
OSV
•added 2025/04/22 12:00 a.m.•13 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS6.7AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/04/22 12:00 a.m.•28 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.1AI score0.00808EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/04/22 12:00 a.m.•26 views

CVE-2024-33452

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request...

7.7CVSS7.5AI score0.00808EPSS
SaveExploits1
CVE
CVE
•added 2025/04/22 12:00 a.m.•168 views

CVE-2024-33452

The OpenResty lua-nginx-module (v.0.10.26 and before) contains a flaw allowing a remote attacker to conduct HTTP request smuggling via a crafted HEAD request . This vulnerability, identified as CVE-2024-33452 , can be leveraged to bypass frontend proxy protections, serve malicious responses to us...

7.7CVSS7.1AI score0.00808EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/16 12:00 a.m.•25 views

The vulnerability of the lua-nginx-module in NGINX web servers, related to inconsistent interpretation of HTTP requests, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the lua-nginx-module in NGINX web servers is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests a type of HTTP Request Smuggling attack...

7.5CVSS7.2AI score0.00808EPSS
SaveExploits1References6Affected Software2
Positive Technologies
Positive Technologies
•added 2025/03/09 12:00 a.m.•15 views

PT-2025-11679 · Openresty +1 · Lua-Nginx-Module +2

Name of the Vulnerable Software and Affected Versions: OpenResty/lua-nginx-module affected versions not specified Description: The issue concerns HTTP Request Smuggling in HEAD requests. When handling HTTP/1.1 requests, the lua-nginx-module incorrectly parses HEAD requests with a body, treating t...

7.7CVSS5.3AI score0.01423EPSS
SaveExploits1References31
OSV
OSV
•added 2024/03/06 10:59 a.m.•55 views

BIT-OPENRESTY-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6AI score0.01423EPSS
SaveExploits0References6
OSV
OSV
•added 2021/04/06 7:15 p.m.•6 views

DEBIAN-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS5.6AI score0.01423EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/06 7:15 p.m.•30 views

Cross site request forgery (csrf)

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5CVSS5.8AI score0.01423EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/04/06 7:15 p.m.•16 views

UBUNTU-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6AI score0.01423EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/06 12:00 a.m.•5 views

CVE-2020-36309: Undefined Security Weakness

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS5.8AI score0.01423EPSS
SaveExploits0References1
Rows per page
Query Builder