CVE-2025-61919 Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, Rack::RequestPOST reads the entire request body into memory for Content-Type: application/x-www-form-urlencoded, calling rack.input.readnil without enforcing a length or cap. Large request bodies can therefo...

CVE-2025-61919

CVE-2025-61919 : Rack’s Rack::Request#POST reads the entire body into memory for application/x-www-form-urlencoded and can cause DoS via memory exhaustion in affected versions prior to 2.2.20, 3.1.18, and 3.2.3. The fix enforces form parameter limits (query_parser.bytesize_limit) and prevents unb...

GHSA-6XW4-3V39-52MM Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing

Summary Rack::RequestPOST reads the entire request body into memory for Content-Type: application/x-www-form-urlencoded, calling rack.input.readnil without enforcing a length or cap. Large request bodies can therefore be buffered completely into process memory before parsing, leading to denial of...

EUVD-2006-5195

Malware in sbrugna...

EUVD-2002-1405

Malware in sbrugna...

EUVD-2006-0764

Malware in sbrugna...

EUVD-2003-0469

Malware in sbrugna...

EUVD-2007-0599

Malware in sbrugna...

EUVD-2018-0773

Malware in sbrugna...

EUVD-2002-0884

Malware in sbrugna...

EUVD-2006-2490

Malware in sbrugna...

EUVD-2020-16452

Malware in sbrugna...

EUVD-2024-1991

Malicious code in bioql PyPI...

EUVD-2025-16447

Malicious code in bioql PyPI...

EUVD-2021-8879

Malicious code in bioql PyPI...

EUVD-2022-3093

Malicious code in bioql PyPI...

RCE-Foryou

RCE-Foryou Python tool for safely testing and exploiting RCE v...

CVE-2025-40927

An HTTP response splitting flaw was found in the CGI::Simple Perl module. This flaw in CGI::Simple allows HTTP response header injection, which can be used for a reflected cross-site scripting XSS attack or an open redirect under certain conditions. Although some validation exists, it can be...

CVE-2025-40927

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some...

Linux Distros Unpatched Vulnerability : CVE-2024-6162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises becau...