Lucene search
+L

259 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/09/29 10:21 p.m.3 views

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in the Requests HTTP library (CVE-2024-47081)

Summary A vulnerability in the Requests HTTP library that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-47081 DESCRIPTION: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to...

5.3CVSS6.5AI score0.00845EPSS
Exploits1Affected Software1
OSV
OSV
added 2025/09/26 1:8 p.m.6 views

OESA-2025-2337 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 5 Summary: A...

6.1CVSS6.8AI score0.02974EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2025/09/26 10:29 a.m.240 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

PoC exploit for CVE-2023-45612, a XXE vulnerability. The target...

9.8CVSS8.2AI score0.00595EPSS
Exploits6
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/23 7:23 a.m.5 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

5.3CVSS6.2AI score0.00845EPSS
Exploits1Affected Software1
GithubExploit
GithubExploit
added 2025/09/16 6:59 p.m.285 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect

ScreenConnect CVE-2024-1709 Exploit Tool A Python tool to che...

10CVSS8.4AI score0.99959EPSS
Exploits9
RedHat Linux
RedHat Linux
added 2025/09/15 1:16 a.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/11 1:38 p.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/10 12:56 p.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/10 12:27 p.m.2 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/10 12:20 p.m.2 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/10 12:20 p.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/10 12:20 p.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
Tenable Nessus
Tenable Nessus
added 2025/09/08 12:0 a.m.4 views

Alibaba Cloud Linux 3 : 0151: resource-agents (ALINUX3-SA-2025:0151)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0151 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to ...

5.3CVSS7AI score0.00845EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2025/09/03 1:23 p.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2025/09/02 2:49 a.m.3 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
OSV
OSV
added 2025/08/28 7:12 a.m.4 views

MAL-2025-41784 Malicious code in toolbelt-requests (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
RedHat Linux
RedHat Linux
added 2025/08/27 3:17 p.m.2 views

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...

5.3CVSS6.6AI score0.00845EPSS
Exploits1References14
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-29476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Requests is a HTTP library written in PHP. Requests mishandles deserialization in FilteredIterator. The issue has been patched and users of Requests 1.6.0, 1.6....

9.8CVSS7.2AI score0.02142EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/20 1:48 p.m.6 views

Security Bulletin: IBM SOAR QRadar Plugin app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible...

8.8CVSS8.3AI score0.01454EPSS
Exploits7Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-47081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific...

5.3CVSS6.7AI score0.00845EPSS
Exploits1References3
Rows per page
Query Builder