Lucene search
+L

10812 matches found

OSV
OSV
added 2026/08/28 12:16 p.m.5 views

UBUNTU-CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

7.6CVSS5.9AI score0.00233EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 12:16 p.m.9 views

CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

7.6CVSS5.9AI score0.00233EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/28 10:49 a.m.34 views

CVE-2026-82255 gitoxide 0.25.4 HTTP Credential Leak via Redirect

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

7.6CVSS0.00233EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 10:49 a.m.24 views

CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak in the curl-based transport backend . The root cause is that credential validation checks the original URL rather than the effective URL after a redirect, allowing credentials to be sent to attacker-controlled destinations via cross-do...

7.6CVSS5.9AI score0.00233EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 10:49 a.m.11 views

EUVD-2026-67581

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

7.6CVSS5.9AI score0.00233EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 12:00 a.m.11 views

EUVD-2026-67767

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

8.1CVSS6.1AI score0.0143EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/08/28 12:00 a.m.36 views

CVE-2026-50979

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

0.0143EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/28 12:00 a.m.48 views

CVE-2026-50979

Osbil Technology oPanel (v1.19.50 and earlier) contains a command injection vulnerability in the advanced/curl endpoint. The url parameter is not adequately sanitized before being passed to the system's curl execution routine. An authenticated attacker can bypass space restrictions using shell va...

8.1CVSS6.1AI score0.0143EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.14 views

PT-2026-83134

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

6.1AI score0.0143EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/08/27 4:24 p.m.8 views

CVE-2026-67339

A flaw was found in guzzlehttp/guzzle, where it fails to properly isolate Proxy-Authorization headers from origin servers when using cURL handlers. A remote attacker could exploit this vulnerability when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle misclassifies as...

6.9CVSS5.4AI score0.00233EPSS
SaveExploits0References5
Hacker One
Hacker One
added 2026/08/27 9:29 a.m.6 views

curl: 49: Cookie-jar save transfers group access to a different GID

Summary Curlfopen copies the old cookie jar's permission bits onto a newly created temp file, but the temp file may receive a different GID the process's primary group instead of the old file's group. After rename, group-permission bits that were intended for one group now authorize a different...

9.8CVSS0.07321EPSS
SaveExploits1
Hacker One
Hacker One
added 2026/08/27 8:28 a.m.10 views

curl: CVE-2026-82208: wolfSSL CA-cache hit overrides callback

Summary With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, curl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then...

7.5CVSS5.9AI score0.00134EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.11 views

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:3798-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3798-1 advisory. - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-5773: wrong reuse of SMB...

9.1CVSS6.7AI score0.00719EPSS
SaveExploits7References22
Hacker One
Hacker One
added 2026/08/26 10:58 p.m.12 views

curl: CVE-2026-80255: secure cookie attribute bypass with tab

Summary A Set-Cookie header using HTAB horizontal tab instead of SPACE before the Secure attribute — e.g. Set-Cookie: sid=SECRET;\tSecure — causes curl to store the cookie without its Secure flag. The cookie is then sent over plaintext HTTP on subsequent requests to the same host. The...

7.5CVSS5.8AI score0.00216EPSS
SaveExploits0
Hacker One
Hacker One
added 2026/08/26 10:49 p.m.9 views

curl: CVE-2026-82209: domain-scoped PSL domain cookie

Summary When libpsl is enabled and a response host is itself a public suffix e.g. github.io, a Set-Cookie header whose Domain attribute exactly equals that host is accepted by psliscookiedomainacceptable but stored with tailmatch = TRUE. RFC 6265 §5.3 requires this exact-match case to produce a...

8.2CVSS5.9AI score0.00216EPSS
SaveExploits0
Hacker One
Hacker One
added 2026/08/26 10:10 p.m.14 views

curl: 46: `--libcurl` output carries `--insecure` across `--next` boundaries

Summary When --libcurl generates C source for a command that uses --next to separate multiple operations, local options from earlier operations leak into later ones. Specifically, if the first operation uses --insecure and the second does not, the generated program silently skips TLS certificate...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/08/26 2:45 p.m.19 views

Exploit for CVE-2026-19914

cve-id Donate Help maintain this project...

6AI score0.00594EPSS
SaveExploits1
OSV
OSV
added 2026/08/26 9:24 a.m.13 views

ROOT-OS-ALPINE-320-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root

Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

9.1CVSS5.2AI score0.00444EPSS
SaveExploits1
OSV
OSV
added 2026/08/26 9:24 a.m.13 views

ROOT-OS-ALPINE-320-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

9.8CVSS4.7AI score0.00891EPSS
SaveExploits1
OSV
OSV
added 2026/08/26 9:24 a.m.11 views

ROOT-OS-ALPINE-320-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

9.1CVSS4.8AI score0.0056EPSS
SaveExploits1
Rows per page
Query Builder