Lucene search
+L

37807 matches found

EUVD
EUVD
added 2026/07/20 6:55 p.m.5 views

EUVD-2025-203032

Tornado vulnerable to Header Injection and XSS via reason argument...

6.1CVSS5.5AI score0.00207EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/07/20 6:55 p.m.12 views

Tornado vulnerable to Header Injection and XSS via reason argument

Header injection and XSS via reason argument Summary The reason argument used by both RequestHandler.setstatus and tornado.web.HTTPError is designed to allow applications to pass custom "reason" phrases the "Not Found" in HTTP/1.1 404 Not Found to the HTTP status line mainly for non-standard stat...

6.1CVSS5.7AI score0.00207EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/20 6:55 p.m.7 views

GHSA-PR2V-JX2C-WG9F Tornado vulnerable to Header Injection and XSS via reason argument

Header injection and XSS via reason argument Summary The reason argument used by both RequestHandler.setstatus and tornado.web.HTTPError is designed to allow applications to pass custom "reason" phrases the "Not Found" in HTTP/1.1 404 Not Found to the HTTP status line mainly for non-standard stat...

5.4CVSS5.7AI score0.00207EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/20 6:50 p.m.7 views

CVE-2026-64619

FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers to circumvent request throttling by supplying attacker-controlled X-Real-IP and X-Forwarded-For headers without verification of trusted reverse proxy origin. Attackers...

8.7CVSS5.4AI score0.00202EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/20 6:50 p.m.12 views

CVE-2026-64619

FileCodeBox prior to 2.4 is affected by a rate-limit bypass in the IPRateLimit component. An unauthenticated attacker can spoof X-Real-IP and X-Forwarded-For headers without verifying the trusted reverse proxy origin, sending unique IP values per request to enumerate all share codes and access ot...

8.7CVSS5.4AI score0.00202EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/20 6:14 p.m.7 views

CVE-2026-63107 LimeSurvey SSRF via REST API Survey Template Host Header

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS5.5AI score0.00209EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 6:14 p.m.5 views

CVE-2026-63107

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS5.5AI score0.00209EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/20 6:14 p.m.7 views

CVE-2026-63107 LimeSurvey SSRF via REST API Survey Template Host Header

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

6.3CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/20 6:14 p.m.9 views

EUVD-2026-46061

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS5.5AI score0.00209EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/20 6:14 p.m.25 views

CVE-2026-63107

LimeSurvey (versions up to 6.17.10 and 7.0.4) contains a server-side request forgery in the REST API survey template endpoint. The vulnerability arises from unsanitized use of the HTTP Host header in getTemplateData(), allowing authenticated users to cause the server to issue arbitrary HTTP reque...

7.7CVSS5.6AI score0.00209EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 6:14 p.m.45 views

CVE-2026-63107 LimeSurvey SSRF via REST API Survey Template Host Header

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS0.00209EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/20 5:51 p.m.7 views

Prototype Pollution

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution in the Basic authentication header construction in lib/adapters/http.js and lib/helpers/resolveConfig.js, which read the username and...

9.1CVSS8.2AI score0.00715EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2026/07/20 5:51 p.m.16 views

Axios: Prototype pollution auth subfields can inject Basic auth

Summary Axios versions after the GHSA-q8qp-cvcw-x6jj fix still contain prototype-pollution read-side gadgets in Basic auth subfield handling. If a host application is already affected by prototype pollution and then makes an axios request with an own auth object that omits username or password,...

6.3CVSS6.2AI score0.00365EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/07/20 5:51 p.m.8 views

GHSA-XJ6Q-8X83-JV6G Axios: Prototype pollution auth subfields can inject Basic auth

Summary Axios versions after the GHSA-q8qp-cvcw-x6jj fix still contain prototype-pollution read-side gadgets in Basic auth subfield handling. If a host application is already affected by prototype pollution and then makes an axios request with an own auth object that omits username or password,...

6.3CVSS6.3AI score0.00365EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/20 5:18 p.m.8 views

CVE-2026-58482

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

5.9CVSS0.00132EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/20 5:17 p.m.9 views

CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...

7.5CVSS0.00384EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/20 5:17 p.m.8 views

CVE-2026-46555

WhatsApp MCP Server is a Model Context Protocol MCP server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the whatsapp-bridge HTTP API listens on 127.0.0.1:8080 without authentication and without Host header validation, and the /api/send endpoint accepts...

7.7CVSS0.00187EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/20 5:6 p.m.5 views

CVE-2026-46555 WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration

WhatsApp MCP Server is a Model Context Protocol MCP server for WhatsApp, enabling Claude to read and send WhatsApp messages. Prior to version 0.2.1, the whatsapp-bridge HTTP API listens on 127.0.0.1:8080 without authentication and without Host header validation, and the /api/send endpoint accepts...

7.7CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/20 4:38 p.m.33 views

CVE-2026-58482 Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

5.9CVSS0.00132EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/20 4:12 p.m.10 views

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

8.2CVSS5.3AI score0.00664EPSS
SaveExploits1References5
Rows per page
Query Builder