3 matches found
CVE-2026-74752 sctp: validate cookie AUTH state before use
In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...
NPM: Axios: Prototype pollution auth subfields can inject Basic auth
NPM: Axios: Prototype pollution auth subfields can inject Basic auth vulnerability discovered by ? in WordPress Npm axios versions = 1.15.2, 1.18.0...
PT-2014-2043 · Php +5 · Mod Php +7
Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.4.30 PHP versions 5.5.x prior to 5.5.14 Description: The issue is related to a "type confusion" vulnerability in the phpinfo implementation, which might allow context-dependent attackers to obtain sensitive information...