882 matches found
nginx-ultimate-bad-bot-blocker
...
WP Content Copy Protection & No Right Click - Open Redirect
The WP Content Copy Protection & No Right Click plugin before version 15.3 contains an open-redirect vulnerability via the referrer parameter in no-js.php, allowing redirection of users to external sites. id: CVE-2024-6690 info: name: WP Content Copy Protection & No Right Click - Open Redirect...
CVE-2025-4664
🔒 Vulnerabilidad CVE-2025-4664 La vulnerabilidad CVE-2025-4664 es un fallo de seguridad de alta gravedad identificado en el componente Loader de Google Chrome, presente en versiones anteriores a la 136.0.7103.113. Este problema permite a un atacante remoto filtrar datos de origen cruzado mediante...
CVE-2023-4294
ID de CVE : CVE-2023-4294 Tipo de vulnerabilidad : Cross-Site Scripting Descripción : El plugin URL Shortify para WordPress es vulnerable a Stored Cross-Site Scripting a través de la cabecera referrer en versiones hasta la 1.7.5 inclusive debido a un insuficiente saneamiento de entrada y escape d...
Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match
Summary Grav\Common\Uri::referrer and Grav\Common\Page\Pages::referrerRoute both check whether an incoming request's Referer header "came from our site" using strstartswith$referrer, $base, where $base is the site's own absolute root URL for example https://example.com, no trailing slash. Because...
SUSE CVE-2026-55588
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...
GO-2026-6317 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption in oras.land/oras
ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption in oras.land/oras...
GHSA-68JX-F42C-7599 TYPO3 CMS - Broken Access Control in Backend and Install Tool
Problem The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 CVE-2020-11069 became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Admin Tool applications from the site's main entry script instead of the dedicated typo3/ directory. Whether a request originat...
EUVD-2026-55971
TYPO3 CMS - Broken Access Control in Backend and Install Tool...
TYPO3 CMS - Broken Access Control in Backend and Install Tool
Problem The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 CVE-2020-11069 became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Admin Tool applications from the site's main entry script instead of the dedicated typo3/ directory. Whether a request originat...
EUVD-2026-66110
ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption...
ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption
Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...
GHSA-298F-872V-2RCX ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption
Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...
CVE-2026-55588
A flaw was found in ORAS OCI Registry As Storage CLI. A remote attacker, by operating a malicious OCI Open Container Initiative registry that returns a cyclic referrer graph, could cause unbounded recursion and memory growth in the client. This vulnerability leads to a client-side Denial of Servi...
Linux Distros Unpatched Vulnerability : CVE-2026-55588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referr...
DEBIAN-CVE-2026-55588
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...
CVE-2026-55588
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...
CVE-2026-55588
ORAS CLI (OCI Registry As Storage) versions up to and including 1.3.2 contain a client-side denial-of-service vulnerability in the recursive referrer traversal. The traversal does not track visited descriptors, so a malicious OCI registry returning a cyclic referrer graph (e.g., A→B→A) triggers u...
CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...
CVE-2026-55588 ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...