47958 matches found
CVE-2026-88916 Admin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...
CVE-2026-88916
TÜBİTAK ULAKBİM UlakPDF is susceptible to an Incorrect Authorization vulnerability, which allows for Privilege Escalation . Specifically, an Admin Access Bypass can occur due to a Header Fallback mechanism in the software. This issue affects versions up to 09092026 . The vulnerability has a CVSS ...
exploitation-labs
Icecast 2.0.1 Header Overwrite — Windows 7 CVE: CVE-2004-...
mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header
A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...
Denial Of Service
Apache CXF is vulnerable to Denial Of Service. The vulnerability is due to incomplete mitigation of attachment-header processing, allowing an attacker to send a message containing many attachment headers and cause excessive resource consumption...
EUVD-2026-85786
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...
CVE-2026-97149
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...
USN-8811-1 python-urllib3 vulnerability
It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information...
USN-8811-1: urllib3 vulnerability
It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information...
PT-2026-97852
Name of the Vulnerable Software and Affected Versions OpenStack Zaqar versions prior to 22.0.2 Description WSGI transport mishandles the URL-Signature header. An unauthenticated remote attacker who knows a target project's UUID can bypass Keystone authentication and pre-signed URL verification by...
PT-2026-97822
Name of the Vulnerable Software and Affected Versions mcp-remote versions 0.1.32 through 0.1.38 Description The software is subject to Server-Side Request Forgery SSRF, a flaw that allows a server to make requests to an unintended location. This occurs because the application trusts and fetches t...
CVE-2026-97404: Use of Less Trusted Source
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...
CVE-2026-51994: Server-Side Request Forgery (SSRF)
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...
CVE-2026-61815: Improper Neutralization of CRLF Sequences
zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap functions and Pear libraries for reading messages in Internet Message Format RFC 822. Prior to version 3.0.6 and 4.0.2, CRLF carriage-return / line-feed header injection CWE-93 affecting any application that uses this libra...
CVE-2026-97149: Incomplete List of Disallowed Inputs
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...
PT-2026-97928
Name of the Vulnerable Software and Affected Versions libsndfile version 1.2.2 Description An integer overflow occurs in the mat4 read header function when the software parses specially crafted MAT4 MATLAB v4 files. Recommendations At the moment, there is no information about a newer version that...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages: kernel Note: Th...
EUVD-2026-86017
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...
