848 matches found
EUVD-2019-13278
Malware in sbrugna...
EUVD-2019-13279
Malware in sbrugna...
EUVD-2015-5858
Malware in sbrugna...
EUVD-2005-2869
Malware in sbrugna...
EUVD-2017-16121
Malware in sbrugna...
EUVD-2016-2896
Malware in sbrugna...
EUVD-2008-3316
Malware in sbrugna...
GHSA-HM36-FFRH-C77C Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
While testing Litestar's RateLimitMiddleware, I discovered that rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. The Problem Litestar's RateLimitMiddleware uses cachekeyfromrequest to...
HTTP Request Smuggling
io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to incorrectly accepting standalone newline characters LF as a chunk-size line terminator instead of requiring CRLF per HTTP/1.1 standards, which allows an attacker to craft malicious requests that are...
Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain
Software signing provides a formal mechanism for provenance by ensuring artifact integrity and verifying producer identity. It also imposes tooling and operational costs to implement in practice. In an era of centralized registries such as PyPI, npm, Maven Central, and Hugging Face, it is...
EUVD-2025-0098
Malicious code in bioql PyPI...
EUVD-2022-41319
Malicious code in bioql PyPI...
EUVD-2022-30818
Malicious code in bioql PyPI...
EUVD-2025-16457
Malicious code in bioql PyPI...
EUVD-2025-31771
Malicious code in bioql PyPI...
EUVD-2024-51141
Malicious code in bioql PyPI...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...
[SECURITY] Fedora 42 Update: curl-8.11.1-6.fc42
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Malicious code in fast-proxies (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80cd3bbfb200cc0af579901773019a1d152ff4adda7764bbae1b9516e38a11c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...