1473 matches found
CVE-2018-25160
Summary (CVE-2018-25160) : The Perl package HTTP::Session2 (versions through 1.09) does not validate the format of user-provided session IDs, enabling potential code injection or other impact depending on the session backend. Red Hat and EU/ENISA entries corroborate that insecure session-id handl...
PT-2026-22399
Name of the Vulnerable Software and Affected Versions HTTP::Session2 versions through 1.09 Description The software does not properly validate user-provided session IDs, which could allow for code injection or other impacts depending on the session backend. For example, if memcached is used for...
CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4
CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4. A patched version of the package is available...
CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3
CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3. A patched version of the package is available...
AZL-75521 CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3
An issue from the component luaGrunerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...
AZL-75464 CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4
An issue from the component luaGrunerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...
MiracleLinux 7 : memcached-1.4.15-10.el7.1 (AXSA:2016-957:03)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-957:03 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
MiracleLinux 4 : memcached-1.4.4-3.AXS4.1 (AXSA:2016-960:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-960:01 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
CVE-2022-26635
PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly...
CVE-2023-45148
Nextcloud is an open source home cloud server. When Memcached is used as memcache.distributed the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgra...
curl: Protocol Smuggling / CRLF Injection via Gopher Protocol allows Arbitrary Command Injection
Summary: I have discovered that the Gopher protocol implementation in curl fails to properly sanitize newline characters %0d%0 in the selector path. This allows an attacker to inject arbitrary TCP commands when curl connects to a target server via gopher://. This vulnerability enables Protocol...
Packetbeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-30)
Packetbeat Improper Bounds Check ESA-2025-30 Improper Bounds Check CWE-787 in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow CAPEC-100 and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid...
Exploit for Deserialization of Untrusted Data in Thinkphp
CVE-2024-44902 - ThinkPHP Insecure Deserialization RCE Vulner...
EUVD-2020-0067
Malware in sbrugna...
EUVD-2013-7067
Malware in sbrugna...
EUVD-2018-1850
Malware in sbrugna...
EUVD-2021-24081
Malware in sbrugna...
EUVD-2018-14917
Malware in sbrugna...