Lucene search
+L

45052 matches found

EUVD
EUVD
•added 2026/09/15 3:18 p.m.•10 views

EUVD-2026-78642

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS5.9AI score0.004EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 3:18 p.m.•7 views

CVE-2026-91966 AVideo through 29.0 Unauthenticated SSRF via Host Header

AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the checksiteavailability function that accepts attacker-controlled HTTP Host headers. Attackers can send requests to submitIndex.php or ajax.php with arbitrary Host headers to probe internal network host...

6.9CVSS5.9AI score
SaveExploits0References4
OSV
OSV
•added 2026/09/15 3:17 p.m.•9 views

CVE-2024-58384 Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/15 3:17 p.m.•9 views

CVE-2024-58384 Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/15 3:17 p.m.•14 views

CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/15 3:17 p.m.•12 views

EUVD-2024-55766

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 3:17 p.m.•25 views

CVE-2024-58384

CVE-2024-58384 affects the Tornado Python web framework in versions before 6.4.1 . The flaw resides in the CurlAsyncHTTPClient component, which fails to reject carriage return and line feed (CRLF) characters in HTTP request headers. A remote attacker can inject CRLF sequences into header values t...

6.3CVSS5.9AI score0.00242EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 3:17 p.m.•37 views

CVE-2024-14029 Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding

Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attackers can exploit this inconsistency when Tornado is deployed behind proxies to perform HTTP request smuggling, enabling...

9CVSS0.00352EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 3:17 p.m.•13 views

CVE-2023-54397 Tornado before 6.3.3 HTTP Request Smuggling via Content-Length

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain...

9CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/15 2:32 p.m.•33 views

CVE-2026-54254 Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sites

Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts. From 8.5.0 until 9.14.0, the Pixeldrain crawler uses substring host matching instead of requiring the input host to be an exact member of SUPPORTEDDOMAINS, and then reuses that input host for API requests. When a Pixeldrain A...

5.9CVSS0.00528EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/15 2:31 p.m.•15 views

CVE-2026-49446 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

6.1CVSS5.8AI score0.00299EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 2:31 p.m.•7 views

CVE-2026-49446 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

6.1CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/15 2:31 p.m.•31 views

CVE-2026-49446 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

6.1CVSS0.00299EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 2:29 p.m.•12 views

CVE-2026-54167 Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...

8.2CVSS5.7AI score
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2026/09/15 1:40 p.m.•14 views

CVE-2026-59230

A flaw was found in Apache Camel's camel-mail component. The MimeMultipart data format copies MIME headers from an incoming message onto the Camel message when unmarshalling with headersInline=true, without applying a HeaderFilterStrategy. An attacker who can provide a crafted MIME message may...

6.5CVSS5.6AI score0.00675EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2026/09/15 1:31 p.m.•12 views

rabbitmq-server: RabbitMQ: Cross-Site WebSocket Hijacking via missing Origin header validation

A flaw was found in RabbitMQ's Web-MQTT and Web-STOMP handlers. These handlers do not properly validate the Origin header during a WebSocket upgrade. When specific non-default configurations are enabled, such as usehttpauth=true for Web-STOMP or sslcertlogin=true for both plugins, an attacker can...

5.3CVSS5.7AI score0.00125EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/15 12:47 p.m.•12 views

Security Bulletin: IBM Sterling File Gateway is Vulnerable to Authentication Bypass (CVE-2026-75878)

Summary IBM Sterling File Gateway has addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-75878 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an...

9.1CVSS5.9AI score0.00644EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/15 11:17 a.m.•9 views

CVE-2026-57134

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth policies accept any non-empty Authorization header without...

8.2CVSS0.00414EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 10:40 a.m.•9 views

CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...

4.8CVSS5.8AI score0.00253EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 10:40 a.m.•16 views

CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...

4.8CVSS5.7AI score
SaveExploits0References4
Rows per page
Query Builder