7581 matches found
AZL-33498 CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...
@fastify/reply-from JSON Content-Type parsing confusion
Impact The main repo of fastify use fast-content-type-parse to parse request Content-Type, which will trim after split. The fastify-reply-from have not use this repo to unify the parse of Content-Type, which won't trim. As a result, a reverse proxy server built with @fastify/reply-from could...
http-proxy-with-cors (>=1.2.2, <=1.2.4) potentially affected by CVE-2023-51701 via @fastify/reply-from (9.1.0)
@fastify/reply-from NPM version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/reply-from and may be impacted: - http-proxy-with-cors =1.2.2, =1.2.4 Source cves: CVE-2023-51701 Source advisory: OSV:GHSA-V2V2-HPH8-Q5XP...
CVE-2023-51701 @fastify-reply-from JSON Content-Type parsing confusion
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with @fastify/reply-from could misinterpret the incoming body by passing an header ContentType: application/json ; charset=utf-8. This can lead to bypass of security checks...
CVE-2023-51701 @fastify-reply-from JSON Content-Type parsing confusion
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with @fastify/reply-from could misinterpret the incoming body by passing an header ContentType: application/json ; charset=utf-8. This can lead to bypass of security checks...
CVE-2023-51701
CVE-2023-51701 affects fastify-reply-from, a Fastify plugin. The vulnerability arises when the plugin misinterprets the request body due to a Content-Type handling discrepancy (Content-Type header like application/json ; charset=utf-8), allowing bypass of security checks. References in multiple s...
CVE-2023-51701
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with "@fastify/reply-from" could misinterpret the incoming body by passing an header "ContentType: application/json ; charset=utf-8". This can lead to bypass of security...
CVE-2023-51701 @fastify-reply-from JSON Content-Type parsing confusion
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with @fastify/reply-from could misinterpret the incoming body by passing an header ContentType: application/json ; charset=utf-8. This can lead to bypass of security checks...
RHSA-2019:3082
creationtimestamp| type| source ---|---|--- 2024-01-08 13:36:46+00:00| seen| https://t.me/ctinow/164333...
Fastify Environmental Vulnerabilities
Fastify is an open source web framework for Node.js from the OpenJS Foundation. A security vulnerability exists in Fastify fastify-reply-from versions prior to 9.6.0, which stems from the fact that passing body text via header using fastify/reply-from may be misinterpreted, leading to bypassing...
CVE-2023-51701: Inconsistent Interpretation of HTTP Requests
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with @fastify/reply-from could misinterpret the incoming body by passing an header ContentType: application/json ; charset=utf-8. This can lead to bypass of security checks...
PT-2024-14252
Name of the Vulnerable Software and Affected Versions @fastify/reply-from versions prior to 9.6.0 Description The issue arises when a reverse proxy server built with @fastify/reply-from misinterprets the incoming body by passing a header ContentType: application/json ; charset=utf-8, potentially...
PT-2024-15421 · Sentex · Sentex Ftpdmin
Name of the Vulnerable Software and Affected Versions: Sentex FTPDMIN version 0.96 Description: A vulnerability has been found in the RNFR Command Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. Recommendations: For Sentex FTPDMIN versi...
CVE-2024-21642: Server-Side Request Forgery (SSRF)
D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerable to server-side request forgery SSRF, allowing attackers to access files on the server. Users should upgrade to version 3.9.0, where the Load From the Web input is turned off ...
CVE-2023-51668: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Zone Inline Image Upload for BBPress.This issue affects Inline Image Upload for BBPress: from n/a through 1.1.18...
CVE-2023-51673: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from n/a through 7.0.17...
CVE-2023-42425
creationtimestamp| type| source ---|---|--- 2024-01-03 12:54:06+00:00| seen| https://t.me/arpsyndicate/2320...
Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation
The Mozilla Foundation Security Advisory describes this flaw as: The VideoBridge allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox...
CVE-2023-52180: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...
SUSE CVE-2023-51764
Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking or certain other options that exist in recent versions. Remote attackers can use a published exploitation technique to inject e-mail messages with ...