973232 matches found
curl: ## Title Heap Use-After-Free Vulnerability in `curl` Leading to Potential Code Execution
Summary A Use-After-Free UAF vulnerability was discovered in curl at curltrc.c:195. When processing specially crafted input, the code accesses memory after it has already been freed. This can result in undefined behavior, leading to a denial of service crash and potentially enabling information...
MAL-2025-6915 Malicious code in bug-bounty-hunter (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6914 Malicious code in bug-bounty (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in bug-bounty (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in project-bounty (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6949 Malicious code in project-bounty (npm)
The package communicates with a domain associated with malicious activity...
IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 4, 2025 to August 10, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
curl: Insecure WebSocket Usage in curl Documentation and Examples (CWE-319: Cleartext Transmission of Sensitive Information)
The curl source repository contains official documentation and example code that demonstrate WebSocket connections using the insecure ws:// protocol instead of the secure wss://. This misleading guidance may encourage developers to implement cleartext WebSocket endpoints, exposing users and...
curl: CVE-2025-9086: Out of bounds read for cookie path
We are tracking this issue with the public ID BIGSLEEP-437903454. Please use this identifier for reference in any future communication. Vulnerability Details In the cookie support found in cookie.c, there's an out-of-bounds string comparison that results from a crafted sequence of cookie...
curl: Vulnerability Report: Local File Disclosure via file:// Protocol in cURL
Summary A security vulnerability has been identified that allows unauthorized local file system access via the file:// protocol in cURL, particularly when executed with elevated privileges e.g., sudo. This could lead to sensitive data exposure, including password hashes stored in /etc/shadow. Ste...
curl: Title: Remote Code Execution (RCE) via Arbitrary Library Loading in `--engine` option
Summary: The curl command-line tool is vulnerable to Arbitrary Code Execution on POSIX-like systems Linux, macOS, etc.. The --engine option allows loading an OpenSSL crypto engine from a shared library .so file. Crucially, this option accepts an absolute or relative path to the library file,...
Nextcloud: Stored XSS in contacts app via organisation and title field
A stored XSS vulnerability was discovered in the contacts app of the software. The vulnerability could be triggered by inputting malicious code in the organization or title field...
curl: Heap Buffer Overflow in Curl_memdup0() via CURLOPT_COPYPOSTFIELDS/CURLOPT_POSTFIELDSIZE Mismatch
Summary A heap buffer overflow vulnerability exists in libcurl's Curlmemdup0 function when handling CURLOPTCOPYPOSTFIELDS operations. The vulnerability occurs when libcurl internally processes POST data where the specified CURLOPTPOSTFIELDSIZE exceeds the actual buffer size of data set via...
U.S. Dept Of Defense: exposed FOUO documents, including Passport information
A set of FOUO documents, including a person's passport information, was found posted online. The documents were hosted on various government websites and did not appear to contain highly sensitive information, aside from the passport details. The Distributed Denial of Secrets website was also...
GitHub: Sample report: Denial of service
The denial of service vulnerability was identified in the system. The vulnerability could have allowed an attacker to disrupt the availability of the system by exhausting its resources...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 28, 2025 to August 3, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
CVE-2025-32094: HTTP Request Smuggling Via OPTIONS + Obsolete Line Folding
In March 2025, Akamai received a bug bounty report identifying an HTTP Request Smuggling vulnerability that was quickly resolved for all customers...
How To Find SQL Injection Vulnerabilities in WordPress Plugins and Themes
SQL Injection SQLi , a vulnerability almost as old as database-driven web applications themselves CWE-89, persists as a classic example of failing to neutralize user-supplied input before it's used in a SQL query. So why does this well-understood vulnerability type continue to exist? In the...
WakaTime: Double Clickjacking Attack on WakaTime OAuth Authorization Flow at https://wakatime.com/oauth/authorize
The WakaTime OAuth authorization flow was vulnerable to a double-clickjacking attack. The attack allowed an attacker to trick users into unknowingly clicking the "Connect my WakaTime account" button in the consent dialog, enabling the attacker to register an OAuth application, capture the...