netty-codec-http Arbitrary HTTP Request Injection

The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP requests...

CVE-2025-9505 Campcodes Online Loan Management System ajax.php sql injection

A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=saveloantype. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

Linux Distros Unpatched Vulnerability : CVE-2023-31418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to ex...

Mattermost security vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 9.5.x through 9.5.3 and 8.1.x through 8.1.12, which stems from the presence of an issue where a team administrator can promote a guest to a team...

Node.js HTTP Request Interpretation Data Compromise

The vulnerability of the Node.js software platform is related to unauthorized HTTP request exports. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS

An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for issecure and buildabsoluteuri, and HTTP...

Microsoft SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...