EUVD-2024-0401

Malicious code in bioql PyPI...

EUVD-2025-24216

Malicious code in bioql PyPI...

EUVD-2023-42350

Malicious code in bioql PyPI...

EUVD-2022-5855

Malicious code in bioql PyPI...

EUVD-2024-54223

Malicious code in bioql PyPI...

EUVD-2023-0955

Malicious code in bioql PyPI...

EUVD-2022-2542

Malicious code in bioql PyPI...

EUVD-2024-3184

Malicious code in bioql PyPI...

EUVD-2021-32536

Malicious code in bioql PyPI...

EUVD-2025-19236

Malicious code in bioql PyPI...

EUVD-2023-29980

Malicious code in bioql PyPI...

EUVD-2023-54615

Malicious code in bioql PyPI...

EUVD-2022-2679

Malicious code in bioql PyPI...

EUVD-2024-18052

Malicious code in bioql PyPI...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

PT-2025-43520

Name of the Vulnerable Software and Affected Versions KeeneticOS versions prior to 4.3 Description A CRLF-injection flaw exists in KeeneticOS prior to version 4.3. This issue is present at the /auth API endpoint and could allow attackers to gain control of the device. Exploitation involves adding...

NewStart CGSL MAIN 6.06 : ruby Multiple Vulnerabilities (NS-SA-2025-0208)

The remote NewStart CGSL host, running version MAIN 6.06, has ruby packages installed that are affected by multiple vulnerabilities: - CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks vi...

Request Smuggling

h2 is vulnerable to request smuggling. The vulnerability is due to improper validation of header names/values when downgrading HTTP/2 requests to HTTP/1.1, which allows an attacker to inject CRLF characters, manipulate request boundaries, and bypass security controls...

Medium: python-h2

Issue Overview: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to...