Lucene search
+L

25 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•14 views

Header injection in TurboGears

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS6.1AI score0.00861EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•18 views

PYSEC-2026-556 Header injection in TurboGears

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS6.2AI score0.00861EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•24 views

PT-2026-53625

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS5.4AI score0.00861EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-0670

Malicious code in bioql PyPI...

9.8CVSS6.8AI score0.00861EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/22 5:03 a.m.•16 views

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS6.9AI score0.00861EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/04 9:30 a.m.•61 views

GHSA-8Q38-W56M-QQ2C Header injection in TurboGears

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS9.7AI score0.00861EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2023/02/04 9:30 a.m.•34 views

Header injection in TurboGears

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS2.3AI score0.00861EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2023/02/04 8:15 a.m.•42 views

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS7.2AI score0.00861EPSS
SaveExploits0References5
OSV
OSV
•added 2023/02/04 8:15 a.m.•19 views

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS9.7AI score
SaveExploits0References5
CVE
CVE
•added 2023/02/04 7:57 a.m.•79 views

CVE-2019-25101

OnShift TurboGears 1.0.11.10 is affected by a critical issue in the HTTP Header Handler (tur bogears/controllers.py) that enables HTTP response splitting. The vulnerability is exploitable remotely and is addressed by upgrading to version 1.0.11.11. The patch is identified as f68bbaba47f4474e1da55...

9.8CVSS8AI score0.00861EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2023/02/04 7:57 a.m.•2 views

CVE-2019-25101

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS0.00861EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2023/02/04 7:57 a.m.•41 views

CVE-2019-25101 OnShift TurboGears HTTP Header controllers.py response splitting

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

6.5CVSS9.7AI score0.00861EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/04 12:00 a.m.•3 views

CVE-2019-25101: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to http response splitting. It is possible to initiate the attack remotely...

9.8CVSS5.2AI score0.00861EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/02/04 12:00 a.m.•21 views

PT-2023-11359

Name of the Vulnerable Software and Affected Versions OnShift TurboGears version 1.0.11.10 Description A critical vulnerability has been found in OnShift TurboGears, affecting an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The manipulation leads to htt...

9.8CVSS6.3AI score0.00861EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2023/02/04 12:00 a.m.•20 views

TurboGears 注入漏洞

TurboGears is an open source web development framework from OnShift. TurboGears version 1.0.11.10 suffers from an injection vulnerability that stems from a problem in the unknown section of the file turbogears/controllers.py in the component HTTP Header Handler, which can lead to a split http...

9.8CVSS6.8AI score0.00861EPSS
SaveExploits0References6
Fedora
Fedora
•added 2016/05/07 1:50 p.m.•24 views

[SECURITY] Fedora 24 Update: python-tgcaptcha2-0.3.1-1.fc24

TGCaptcha2 is a TurboGears widget that provides an easy way to incorporate a captcha as part a form in an attempt to reduce spam or malicious activity. Features include: Relatively pain-free usage and validation inside of a regular widget-based form Flexibility to add or extend image generation...

2.5AI score
SaveExploits0
Fedora
Fedora
•added 2016/04/24 8:56 p.m.•24 views

[SECURITY] Fedora 23 Update: python-tgcaptcha2-0.3.1-1.fc23

TGCaptcha2 is a TurboGears widget that provides an easy way to incorporate a captcha as part a form in an attempt to reduce spam or malicious activity. Features include: Relatively pain-free usage and validation inside of a regular widget-based form Flexibility to add or extend image generation...

2.5AI score
SaveExploits0
Fedora
Fedora
•added 2016/04/24 8:51 p.m.•23 views

[SECURITY] Fedora 22 Update: python-tgcaptcha2-0.3.1-1.fc22

TGCaptcha2 is a TurboGears widget that provides an easy way to incorporate a captcha as part a form in an attempt to reduce spam or malicious activity. Features include: Relatively pain-free usage and validation inside of a regular widget-based form Flexibility to add or extend image generation...

2.5AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/12/02 12:00 a.m.•22 views

Fedora Update for luci FEDORA-2010-16848

Check for the Version of luci OpenVAS Vulnerability Test Fedora Update for luci FEDORA-2010-16848 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.4CVSS0.02002EPSS
SaveExploits0References2
Fedora
Fedora
•added 2010/11/04 11:35 p.m.•66 views

[SECURITY] Fedora 14 Update: luci-0.22.4-2.0.b9faf868074git.fc14

Luci is a web-based high availability administration application built on t he TurboGears 2 framework...

6.4CVSS2.6AI score0.02002EPSS
SaveExploits0
Rows per page
Query Builder