10503 matches found
Php-mod/curl Library <2.3.2 - Cross-Site Scripting
Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...
CVE-2026-69246
Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same throu...
[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Fedora 44 : curl (2026-e691fbbfe7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e691fbbfe7 advisory. - Fix trailing dot domain super cookie CVE-2026-8924 - Fix SSH improper host validation CVE-2026-9547 - Fix password leak with netrc and user in URL...
CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
CVE-2026-67339
GuzzleHTTP/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers, allowing proxy credentials to be captured in origin logs during redirects or SOCKS proxy scenarios. This affects guzzlehttp/guzzle prior to 7.14.2 and can occur when...
CVE-2026-67339 guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
Security Bulletin: Multiple vulnerabilities impact AIX due to CURL libcurl (CVE-2026-10536, CVE-2026-11856, CVE-2026-8286, CVE-2026-8458, CVE-2026-8924, CVE-2026-8927, CVE-2026-8932, CVE-2026-9547).
Summary Multiple vulnerabilities in the curl/libcurl are related to use-after-free, reusing an invalid connection, bypass Public Suffix List checks, improper host key validation and invalid authorization. Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exist...
CLEANSTART-2026-DD34017 Security fixes in curl 7.83.1-r0
Package curl version 7.83.1-r0 fixes 6 vulnerabilities: CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27781, CVE-2022-27782...
CLEANSTART-2026-QM16698 Security fixes in curl 7.65.0-r0
Package curl version 7.65.0-r0 fixes 2 vulnerabilities: CVE-2019-5435, CVE-2019-5436...
CLEANSTART-2026-BO02042 Security fixes in curl 7.36.0-r0
Package curl version 7.36.0-r0 fixes 2 vulnerabilities: CVE-2014-0138, CVE-2014-0139...
CLEANSTART-2026-AW91084 Security fixes in curl 8.3.0-r0
Package curl version 8.3.0-r0 fixes 1 vulnerabilities: CVE-2023-38039...
CLEANSTART-2026-CC45741 Security fixes in curl 7.60.0-r0
Package curl version 7.60.0-r0 fixes 2 vulnerabilities: CVE-2018-1000300, CVE-2018-1000301...
ROOT-OS-UBUNTU-2404-CVE-2026-11856 CVE-2026-11856 in rootio-curl - Patched by Root
Root has patched CVE-2026-11856 in the rootio-curl package for Root:Ubuntu:24.04. Multiple fixed versions available...
GHSA-QXWX-HR5V-H5Q4 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
GHSA-C68Q-H477-5646 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
GHSA-9CRQ-QH8V-6XMM vulnerabilities
Vulnerabilities for packages: eco-python-curl...
GHSA-6V72-WFCJ-JV53 vulnerabilities
Vulnerabilities for packages: eco-python-curl...