CVE-2024-38479

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue...

Vulnerability of Linux operating system’s kernel components related to memory failures, allowing attackers to cause service interruptions

The vulnerability of Linux operating system’s kernel’s mm/memory-failure components is related to incorrect blocking in the pagehandlepoison function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Reliance On Untrusted Inputs In A Security Decision

Sinatra is vulnerable to Reliance on Untrusted Inputs in a Security Decision. The vulnerability is due to improper handling of the X-Forwarded-Host header via the X-Forwarded-Host header, allowing attackers to exploit Open Redirect Attacks, Cache Poisoning, or Routing-based SSRF through untrusted...

PT-2024-9209 · Apache +1 · Apache Traffic Server +1

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.5 Description: The issue is related to improper input validation, which can allow a remote attacker to implement a cache poisoning attack. Th...

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

In an unusually specific campaign, users searching about the legality of Bengal Cats in Australia are being targeted with the GootLoader malware. "In this case, we found the GootLoader actors using search results for information about a particular cat and a particular geography being used to...

Trend Micro and Japanese Partners Reveal Hidden Connections Among SEO Malware Operations

Trend Micro researchers, in collaboration with Japanese authorities, analyzed links between SEO malware families used in SEO poisoning attacks that lead users to fake shopping sites...

Moodle vulnerable to cache poisoning via injection into storage

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

GHSA-2R9M-WG35-RFVC Moodle vulnerable to cache poisoning via injection into storage

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

CVE-2024-43428

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

UBUNTU-CVE-2024-43428

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

CVE-2024-43428

CVE-2024-43428 corresponds to Moodle cache poisoning via injection into storage. The available connected documents indicate the underlying issue is insufficient validation for local storage, enabling a local attacker to poison the cache. Affected context is Moodle (various official advisories ref...

CVE-2024-43428 Moodle: cache poisoning via injection into storage

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

CVE-2024-43428 Moodle: cache poisoning via injection into storage

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

CVE-2024-43428 Moodle: cache poisoning via injection into storage

To address a cache poisoning risk in Moodle, additional validation for local storage was required...

CVE-2024-30140

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page...

CVE-2024-30140

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page...

CVE-2024-30140

CVE-2024-30140 affects HCL BigFix Compliance. Unvalidated redirects and forwards allow an attacker to manipulate the HOST header, potentially poisoning the web cache and serving altered content to users. Public details: CVSS v3.1 base score 5.4 (NETWORK, LOW attack complexity, privileges required...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which stems from a risk of cache poisoning...

SUSE CVE-2024-21510

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into...

grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend

A flaw was found in Google gRPC due to HPACK table poisoning between the proxy and backend so that other clients see failed requests, resulting in a denial of service. This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent...