CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...

XML External Entity (XXE) Injection

Overview org.springframework.restdocs:spring-restdocs-webtestclient is a Affected versions of this package are vulnerable to XML External Entity XXE Injection. due to improperly configured XML parsing in the PrettyPrintingContentModifier and XmlContentHandler classes, in...

[SECURITY] Fedora 44 Update: python-starlette-0.52.1-2.fc44

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

[SECURITY] Fedora 43 Update: python-starlette-0.52.1-2.fc43

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

CVE-2025-60035

The vulnerability CVE-2025-60035 affects the OPC.Testclient utility in Rexroth IndraWorks prior to version 15V24. It allows an attacker to achieve Remote Code Execution by parsing a specially crafted serialized file that is opened by a user; deserialization of malicious data leads to a complete c...

[SECURITY] Fedora 42 Update: python-starlette-0.47.3-2.fc42

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

[SECURITY] Fedora 43 Update: python-starlette-0.49.1-1.fc43

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

Exploit for CVE-2025-4476

CVE-2025-4476-Exploit A small Python test client to send HTTP...

EUVD-2014-1201

Malware in sbrugna...

CVE-2014-125028

A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The name of the patch is...

Malware in gql-test-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3717 Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

com.adobe.granite:com.adobe.granite.poi (1.0.2), com.day.crx:crx-server-j2ee (2.3.6) +46 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.8-beta4)

org.apache.poi:poi-ooxml MAVEN version 3.8-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - com.adobe.granite:com.adobe.granite.poi 1.0.2 - com.day.crx:crx-server-j2ee 2.3.6 -...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

[SECURITY] Fedora 40 Update: python-starlette-0.40.0-1.fc40

Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =E2=80=A2 A lightweight, low-complexity HTTP web framework. =E2=80=A2 WebSocket support. =E2=80=A2 In-process background tasks. =E2=80=...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (1.5.2) +8 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.2 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.3.0), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.3.0) +25 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.3.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.3.0 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (2.0.0.cr1), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (2.0.0.cr1) +18 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (2.0.0.cr1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 2.0.0.cr1 -...

io.quarkiverse.cxf:quarkus-cxf-deployment (>=3.8.0, <=3.15.1), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=3.8.0, <=3.15.1) +46 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (>=3.8.0, <=3.15.1)

io.quarkiverse.cxf:quarkus-cxf MAVEN version =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.1, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.8.0, =3.15.1 - io.quarkiverse.cxf:quarkus-cxf-integration-test-ws-security-policy-fips 3.8.1 and more Source cves:...