Lucene search
+L

499 matches found

OSV
OSV
•added 2025/10/20 2:15 p.m.•15 views

UBUNTU-CVE-2025-11677

Use After Free in WebSocket server implementation in lwshandshakeserver in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWSCALLBACKHTTPCONFIRMUPGRADE, to achieve denial of service...

6.3CVSS5.8AI score0.00405EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/10/20 1:41 p.m.•21 views

CVE-2025-11677

Use After Free in WebSocket server implementation in lwshandshakeserver in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWSCALLBACKHTTPCONFIRMUPGRADE, to achieve denial of service...

6.3CVSS5.9AI score0.00405EPSS
SaveExploits0
CVE
CVE
•added 2025/10/20 1:41 p.m.•114 views

CVE-2025-11677

CVE-2025-11677 is a Use After Free in the warmcat libwebsockets WebSocket server (lws_handshake_server). The vulnerability triggers in configurations where a user-supplied callback handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, potentially allowing a denial-of-service. Public advisories reference aff...

6.3CVSS5.9AI score0.00405EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/17 7:46 p.m.•13 views

CVE-2025-62428

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6AI score0.00453EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/16 7:15 p.m.•11 views

CVE-2025-62428

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS0.00453EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/16 6:57 p.m.•11 views

EUVD-2025-34829

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6AI score0.00453EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/16 6:57 p.m.•5 views

CVE-2025-62428 Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6AI score0.00453EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/16 6:57 p.m.•16 views

CVE-2025-62428

CVE-2025-62428 affects Drawing-Captcha APP. A Host Header Injection vulnerability exists in /register and /confirm-email endpoints, allowing an attacker to manipulate the Host header and generate malicious email confirmation links that redirect users to attacker-controlled domains. Impact concern...

9.3CVSS6AI score0.00453EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/16 6:57 p.m.•25 views

CVE-2025-62428 Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS0.00453EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•1 views

CVE-2025-62428: URL Redirection to Untrusted Site

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

9.3CVSS6AI score0.00453EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•16 views

Drawing-Captcha APP 输入验证错误漏洞

Drawing-Captcha APP is a captcha application from Drawing Captcha open source. An input validation error vulnerability exists in Drawing-Captcha APP that stems from the presence of host header injection in the /register and /confirm-email endpoints, which could result in users being redirected to...

9.3CVSS5.8AI score0.00453EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/08 3:02 a.m.•13 views

EUVD-2025-31857

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

6.5CVSS6.3AI score0.00327EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2007-1703

Malware in sbrugna...

4.3CVSS6.3AI score0.01982EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-6737

Malware in sbrugna...

5.1CVSS6.4AI score0.00884EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-17313

Malware in sbrugna...

7.5CVSS7.6AI score0.02434EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2010-3460

Malware in sbrugna...

4.3CVSS6.4AI score0.02966EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•9 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986535 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases...

5.5CVSS6AI score0.00246EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•5 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986930)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986930 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence :...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-12059

Malicious code in bioql PyPI...

5.9CVSS6.9AI score0.00275EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-7631

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00978EPSS
SaveExploits0References8
Rows per page
Query Builder