11 matches found
CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity
CVE-2026-5556 – Bypass del controller di ammissione Kubernetes tramite la distinzione tra maiuscole e minuscole Codice del programma webhook di ammissione Python + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask...
CVE-2026-18356
The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway...
EUVD-2026-63912
The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway...
CVE-2026-72721
Findings: CVE-2026-72721 affects Discourse prior to versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0. The root cause is a case-sensitive comparison in Onebox::DomainChecker.is_blocked?, which compares hostnames and SiteSetting.blocked_onebox_domains entries. This allows an attacker to bypass c...
UBUNTU-CVE-2026-31842
Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The ischunkedtransfer function uses strcmp to compare the header value against "chunked", even though RFC 7230 specifies that...
EUVD-2007-4673
Malware in sbrugna...
[SECURITY] [DLA 3509-1] libmail-dkim-perl update
Debian LTS Advisory DLA-3509-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 27, 2023 https://wiki.debian.org/LTS Package : libmail-dkim-perl Version : 0.54-1+deb10u1 Debian Bug : 1039489 It was discovered that the domain check in libmail-dkim-perl, a Perl...
Fedora 24 : curl (2016-e8e8cdb4ed)
fix cookie injection for other servers CVE-2016-8615 - compare user/passwd case-sensitively while reusing connections CVE-2016-8616 - base64: check for integer overflow on large input CVE-2016-8617 - fix double-free in krb5 code CVE-2016-8619 - fix double-free in curlmaprintf CVE-2016-8618 - fix...
Design/Logic Flaw
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different...
