MAL-2025-41573 Malicious code in https-proxy-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41524 Malicious code in @twork-data-services/proxy-prime-call-get-account-options (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41523 Malicious code in @twork-data-services/proxy-prime-api-v6-customer-account-lite-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41522 Malicious code in @twork-data-services/proxy-prime-api-v2-get-cu-products-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41521 Malicious code in @twork-data-services/proxy-prime-api-v2-account-get-account-utilization-flag (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41520 Malicious code in @twork-data-services/proxy-prime-api-v1-cards-ucid-get-card-otb (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41519 Malicious code in @twork-data-services/proxy-prime-api-v1-card-ucid-services (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41518 Malicious code in @twork-data-services/proxy-prime-api-v1-balances-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41517 Malicious code in @twork-data-services/proxy-prime-api-v1-accounts-get-programs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41516 Malicious code in @twork-data-services/proxy-prime-api-v1-account-overdraft-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41515 Malicious code in @twork-data-services/proxy-prime-api-v1-account-getting-services-status (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41513 Malicious code in @twork-data-services/proxy-prime-acc-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41509 Malicious code in @twork-data-services/proxy-invest-v2-api-v1-cadb-operations (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41507 Malicious code in @twork-data-services/proxy-invest-api-v1-notes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41505 Malicious code in @twork-data-services/proxy-invest-api-v1-customer-stop-orders (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41502 Malicious code in @twork-data-services/proxy-cms-customer-pay-tokens (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress plugin Varnish/Nginx Proxy Caching 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-35028

Name of the Vulnerable Software and Affected Versions: Razvan Stanga Varnish/Nginx Proxy Caching versions through 1.8.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Updat...

ROS-20250828-03

The Apache Tomcat application server vulnerability is due to Apache Tomcat not setting the attribute "Secure" attribute for session cookie JSESSIONID when using RemoteIpFilter with requests, received from a reverse proxy server over HTTP and containing an X-Forwarded-Proto header set to on https...

CLSA-2025-1756324356 Fix CVE(s): CVE-2025-49630

SECURITY UPDATE: denial of service attack caused by untrusted clients triggering assertion in modproxyhttp2 - debian/patches/CVE-2025-49630.patch: tolerate missing host header in h2 proxy to fix issue with HTTP/0.9 request without Host header - CVE-2025-49630...