Lucene search
+L

37632 matches found

Github Security Blog
Github Security Blog
added 2 days ago5 views

Guzzle: Noncanonical host can bypass host-based checks

Impact In affected versions, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same through fopen. libcurl then parses the...

7.2CVSS5.6AI score0.00213EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2 days ago43 views

CVE-2026-69246 Guzzle: Noncanonical host can bypass host-based checks

Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same throu...

7.2CVSS0.00213EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2 days ago4 views

CVE-2026-69246

Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers set CURLOPTURL to the URI exactly as written and push that Host into CURLOPTHTTPHEADER; StreamHandler does the same throu...

7.2CVSS5.6AI score0.00213EPSS
SaveExploits0
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-52439

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...

5.1CVSS5.6AI score0.00381EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago43 views

CVE-2026-18738 Shlink CSV Formula Injection via Visit Export CLI

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, or request path headers beginning with formula-triggering...

5.1CVSS0.00381EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago40 views

CVE-2026-48061 Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omitting the Host header and supplying an X-Forwarded-Host header set to a whitelisted domain. The AllowedHostsMiddleware trusts the...

5.9CVSS0.00282EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago43 views

CVE-2026-48061

Litestar prior to v2.22.0 is affected by CVE-2026-48061: AllowedHostsMiddleware may bypass host validation by using X-Forwarded-Host when Host is absent, enabling host-header injection (e.g., password reset links, cache keys, routing decisions). The issue occurs when no reverse proxy strips X-For...

5.9CVSS5.4AI score0.00282EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago4 views

GHSA-M8RV-5G2X-5CG5 undici vulnerable to CRLF Injection via blob-like body 'type' property

Impact When an application passes a duck-typed blob-like body to undici's HTTP/1.1 dispatcher via request, stream, pipeline, or dispatch with a .type derived from untrusted input, an attacker can inject CRLF sequences \r\n to append arbitrary HTTP headers and potentially smuggle a second request...

4.2CVSS7.3AI score0.00153EPSS
SaveExploits0References10
EUVD
EUVD
added 2 days ago10 views

EUVD-2026-50568

undici vulnerable to CRLF Injection via blob-like body 'type' property...

4.2CVSS7.2AI score0.00153EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2 days ago11 views

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

Impact Undici's cache interceptor mishandles optional whitespace OWS placed around the = of a qualified no-cache or private Cache-Control directive, such as no-cache ="authorization" OWS before = or no-cache= "authorization" OWS after =. The parser either drops the directive entirely or stores a...

7.5CVSS7.2AI score0.00229EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-50566

undici vulnerable to downstream response desynchronization via retry interceptor...

4.8CVSS7.2AI score0.00176EPSS
SaveExploits0References13
OSV
OSV
added 2 days ago4 views

GHSA-4CWX-7WF7-3272 undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives

Summary Two issues in undici's cache interceptor, both fixed by the same patch on lib/util/cache.js: 1. Shared-cache disclosure: Responses with malformed qualified Cache-Control: private directives such as private="" or private="," can be incorrectly stored in the default shared cache, then serve...

7.4CVSS7.1AI score0.00313EPSS
SaveExploits0References7
NVD
NVD
added 2 days ago11 views

CVE-2026-38444

osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting XSS via the email From-header display name. The value is extracted without sanitization in include/class.mailparse.php and stored raw in the poster field of ostthreadentry. When an unauthenticated attacker sends a reply email to an...

6.1CVSS0.00305EPSS
SaveExploits1References3
CVE
CVE
added 2 days ago14 views

CVE-2026-66296

The CVE-2026-66296 issue concerns oaskit: a reflected XSS vulnerability in the default HTML error handler. The root cause is that Oaskit.ErrorHandler.Default.format_reason/4 and Oaskit.ErrorHandler.Default.reason_to_html/1 render request-validation failures as HTML when the Accept header includes...

5.1CVSS5.3AI score0.0031EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2 days ago6 views

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

5.1CVSS5.3AI score0.0031EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago4 views

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

5.1CVSS5.3AI score0.0031EPSS
SaveExploits0References9
NVD
NVD
added 2 days ago9 views

CVE-2026-18607

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

9CVSS0.00438EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago9 views

CVE-2026-18248

@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...

9.1CVSS0.00218EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago5 views

MAL-2026-11508 Malicious code in beaver-ui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758137caa2a9c3d1dffb2fcffabc810c9b47696f78f20d412151d351d425faa0 [email protected] advertises itself as a UI header library but ships a setup.js that runs on npm postinstall and again on require via index.js...

5.5AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago7 views

Malicious code in beaver-ui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758137caa2a9c3d1dffb2fcffabc810c9b47696f78f20d412151d351d425faa0 [email protected] advertises itself as a UI header library but ships a setup.js that runs on npm postinstall and again on require via index.js...

5.5AI score
SaveExploits0References3
Rows per page
Query Builder