CVE-2025-15581

Orthanc versions before 1.12.10 are affected by an authorization logic flaw in the HTTP Basic Authentication implementation. Successful exploitation could enable privilege escalation, potentially granting full administrative access. The CVE notes a MEDIUM base score (CVSS 4.0: 5.7) with network a...

Orthanc 安全漏洞

Orthanc is a free open-source software developed by the Orthanc company. Versions of Orthanc prior to 1.12.10 contained security vulnerabilities. These vulnerabilities stemmed from defects in the implementation of HTTP basic authentication, which could lead to privilege escalation...

CVE-2024-29107

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.12.10...

PT-2026-20548

Name of the Vulnerable Software and Affected Versions Orthanc versions prior to 1.12.10 Description An authorisation logic flaw exists in the HTTP Basic Authentication implementation of Orthanc. Successful exploitation could lead to privilege escalation, potentially granting full administrative...

HTTP Request Smuggling

Overview std/net/textproto is a Go standard library package std/net/textproto Affected versions of this package are vulnerable to HTTP Request Smuggling. Go Vulnerability Report: net/http through net/textproto used to accept and normalize invalid HTTP/1.1 headers with a space before the colon, in...

Design/Logic Flaw

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling...

Google Go Environmental Issues Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. An environment issue vulnerability exists in Google Go versions prior to 1.12.10 and 1.13.x prior to 1.13.1, which can be exploited by an attacker to bypass filters or perform a...

openSUSE Security Update : wireshark (openSUSE-2016-301)

Wireshark was updated to 1.12.10, fixing a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file, specifically : - CVE-2016-2523: DNP dissector...

Wireshark Denial of Service Vulnerability (CNVD-2016-01448)

Wireshark is the most popular network protocol parser. A denial-of-service vulnerability exists in Wireshark versions 1.12.x before 1.12.10 and 2.0.x before 2.0.2, which allows remote attackers to exploit the vulnerability to cause a denial of service...