DEBIAN-CVE-2026-54388

Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to the backend while using the first value to determine how many request body bytes to consume. Remote attackers can...

WordPress Plugin All In One WP Security & Firewall Cross-Site Request Forgery Vulnerability

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . All In One WP Security & Firewall plugin is a Wordpress security management and firewall plugin . A cross-site request forgery vulnerability exists in...

Multiple Cross-Site Request Forgery Vulnerabilities in Acobot Live Chat & Contact Form Plugin

Acobot Live Chat & Contact Form plugin is a very friendly and powerful chat management plugin for WordPres. Acobot Live Chat & Contact Form plugin 2.0 for WordPress suffers from multiple cross-site request forgery vulnerabilities, which can be exploited by remote attackers to hijack an...