EUVD-2026-65540

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

CVE-2022-0155-PoC

CVE-2022-0155 प्रमाण-अवधारणा PoC यह रिपॉजिटरी CVE-2022-0155 भेद्यता का एक प्रदर्शन समाहित करती है। भेद्यता का पता ranjit-git द्वारा लगाया गया था और इसका विस्तृत विवरण यहाँ उपलब्ध है। इस PoC का उद्देश्य यह प्रदर्शित करना है कि भेद्यता केवल उन परिदृश्यों पर लागू नहीं होती जहाँ follow-redirects का...

Remote-Integer-Overflow-Vulnerability

Nginx : Vulnerabilità di Overflow di Intero Remoto Questo repository contiene una vulnerabilità Nginx più vecchia ma ancora esistente chiamata "Vulnerabilità di Overflow di Intero Remoto CVE-2017-7529". La vulnerabilità riguarda server Nginx più vecchi 1.13. Eccezione per Nginx 1.12 Configurazion...

CVE-2026-59324

CVE-2026-59324...

Alibaba Cloud Linux 3 : 0255: resource-agents (ALINUX3-SA-2026:0255)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0255 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44431: urllib3 is an HTTP client library f...

CVE-2026-7366 IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

USN-8632-1 node-follow-redirects vulnerability

Dennis Sepede discovered that follow-redirects did not properly remove custom authentication headers when following cross-domain redirects. An attacker could possibly use this issue to obtain sensitive authentication information, resulting in credential disclosure...

EulerOS 2.0 SP11 : curl (EulerOS-SA-2026-3063)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the...

CVE-2026-46358

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

CVE-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

CVE-2026-46358

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

JLSEC-2026-1216 When reusing a libcurl handle for sequential transfers driven by environment-variable proxy...

When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against proxyA using Digest auth, a subsequent transfer routed...

GHSA-79QM-7RJ5-M7R9 Hono: Proxy Helper does not remove response headers listed in the `Connection` header

Summary The Proxy Helper hono/proxy does not remove response headers named by the origin's Connection header. Headers that the origin marked as connection-scoped are therefore forwarded to clients. Details Per RFC 9110 Section 7.6.1, an intermediary must remove the header fields listed in a...

CVE-2026-71849

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header...

Security Bulletin: IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall (CVE-2026-7366)

Summary IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall CVE-2026-7366 Vulnerability Details CVEID:CVE-2026-7366 DESCRIPTION: IBM DataPower Gateway allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP heade...

Amazon Linux 2023 : python3-tornado (ALAS2023-2026-2016)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2016 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...

UBUNTU-CVE-2026-67339

guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...

CVE-2026-67339

GuzzleHTTP/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers, allowing proxy credentials to be captured in origin logs during redirects or SOCKS proxy scenarios. This affects guzzlehttp/guzzle prior to 7.14.2 and can occur when...

vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects

A flaw was found in Eclipse Vert.x. The DefaultRedirectHandler in vertx-core improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a...

CVE-2026-16481

A Server-Side Request Forgery SSRF and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an HTTP GET request to it using an authenticated client. The...