Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/06/26 10:23 p.m.•22 views

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

Summary @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, but the default scrubSensitiveHeaders callback in RedirectHandlerOptions uses case-sensitive property deletion delete headers.Authorization, delete...

6.9CVSS5.8AI score0.01178EPSS
SaveExploits0References4Affected Software1
GithubExploit
GithubExploit
•added 2026/06/09 11:16 a.m.•101 views

Exploit for CVE-2026-48595

CVE-2026-48595 - elixir-tesla tesla Vulnerability Quick Us...

8.2CVSS5.5AI score0.00671EPSS
SaveExploits3
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•20 views

PT-2026-29126

Name of the Vulnerable Software and Affected Versions Botan versions prior to 3.11.0 Description Botan is a C++ cryptography library. When processing X.509 certificate paths with DNS name constraints, a case-sensitive comparison of the Common Name CN allowed a certificate to bypass restrictions...

5.9CVSS5.9AI score0.00197EPSS
SaveExploits0References4
Rows per page
Query Builder