Lucene search
+L

24 matches found

Kitploit
Kitploit
•added 2026/11/13 2:34 a.m.•35 views

Pulse

Pulse is a powerful logging system for Apple Platforms. Native. Built with SwiftUI. Record and inspect logs and URLSession network requests right from your iOS app. Share logs and view them in Pulse Pro or use remote logging to see them in real time. Logs are stored locally and never leave your...

6AI score
SaveExploits0References7
NVD
NVD
•added 2026/11/10 5:17 p.m.•6 views

CVE-2026-63651

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS0.00249EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/10 4:25 p.m.•10 views

CVE-2026-63651

Prior to version 0.7.0 , LiveDocs is vulnerable to a Server-Side Request Forgery (SSRF) via its fetch_docs and introspect functions. The software passes client-supplied URLs to URLSession without any scheme or host allowlist and follows redirects unconditionally. An attacker can use a prompt-inje...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/10 4:25 p.m.•25 views

CVE-2026-63651 LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/10 12:00 a.m.•4 views

CVE-2026-63651: PsychQuant livedocs: LiveDocs is a primary-source-first documentation for AI agents

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•4 views

PT-2026-141805

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch docs and introspect kinds openapi/graphql, and resolve source's docs url pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-18180

Malware in sbrugna...

5.5CVSS6.6AI score0.00352EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/20 8:15 p.m.•55 views

CVE-2022-3918

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

8.8CVSS8.8AI score0.00807EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/20 8:15 p.m.•35 views

Crlf injection

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

6.5CVSS8.6AI score0.00807EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/01/20 12:00 a.m.•40 views

CVE-2022-3918

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

8.8CVSS7.7AI score0.00807EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/01/20 12:00 a.m.•56 views

CVE-2022-3918

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

9AI score0.00807EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•9 views

CVE-2022-3918: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

8.8CVSS7.8AI score0.00807EPSS
SaveExploits0References2
Mend
Mend
•added 2023/01/20 12:00 a.m.•14 views

CVE-2022-3918

A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF sequences into a URLRequest header value. When that request is sent via URLSession to an HTTP server,...

8.8CVSS7.7AI score0.00807EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/20 12:00 a.m.•106 views

CVE-2022-3918

CVE-2022-3918 involves Swift’s FoundationNetworking (swift-corelibs-foundation). A CRLF injection flaw in URLRequest headers allows a client to insert CRLF sequences into a header value, which may cause the server to parse extra headers or a second request when sent via URLSession. The vulnerabil...

8.8CVSS7.7AI score0.00807EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2020/11/27 4:51 a.m.•38 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

6.2CVSS2.3AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/27 8:15 p.m.•46 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.5CVSS5.2AI score0.00352EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/10/27 8:15 p.m.•42 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.5CVSS6.4AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/27 7:49 p.m.•53 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.2AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/27 7:49 p.m.•88 views

CVE-2019-8790

CVE-2019-8790 involves incorrect management of file descriptors in URLSession within Apple Swift Foundation on Ubuntu, which could lead to inadvertent data disclosure. Connected sources confirm the issue affects Swift’s URLSession handling and was addressed by aligning the file descriptor logic t...

5.5CVSS5AI score0.00352EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/27 12:00 a.m.•11 views

CVE-2019-8790: Insecure Storage of Sensitive Information

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.5CVSS5.8AI score0.00352EPSS
SaveExploits0References2
Rows per page
Query Builder