61 matches found
EulerOS 2.0 SP15 : curl (EulerOS-SA-2026-2879)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, has been found in cURL up to 8.19.0 Network Utility Software. Affected by this issue is some...
UBUNTU-CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
SUSE CVE-2026-44503
The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...
EUVD-2026-26679
A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amfnudmsdmhandleprovisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been...
NextChat 代码问题漏洞
NextChat is an open-source project developed by NextChat for quickly deploying private ChatGPT web applications. Versions of NextChat 2.16.1 and earlier have code vulnerabilities. These vulnerabilities stem from improper handling of the proxyHandler function in the file...
CVE-2026-40247
free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for reading Traffic Influence Subscriptions checks whether the influenceId path segment equals subs-to-notify, but does not return after sending the HTTP 404 response when...
CVE-2026-5580 CodeAstro Online Classroom Parameter addvideos.php sql injection
A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The...
EUVD-2008-4092
Malware in sbrugna...
EUVD-2021-0982
Malware in sbrugna...
EUVD-2008-0020
Malware in sbrugna...
EUVD-2018-18716
Malware in sbrugna...
EUVD-2019-5454
Malware in sbrugna...
EUVD-2020-23124
Malware in sbrugna...
EUVD-2020-7864
Malware in sbrugna...
EUVD-2019-15117
Malware in sbrugna...
EUVD-2025-11844
Malicious code in bioql PyPI...
EUVD-2022-25772
Malicious code in bioql PyPI...
EUVD-2024-2160
Malicious code in bioql PyPI...