go-exploit-cache

go-exploit-cache go-exploit-cache builds an HTTP cache SQLite database used by the go-exploit framework to enable cross-exploit sharing and scanless target verification. Instead of actively connecting to targets, go-exploit can consult the cache to run version checks and other scans using...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parameter Overview A web cache uses only the URL path as the cache key, ignoring query parameters. An attacker can append a malicious payload to an unkeyed parameter e.g., utmcampaign and poison the cache. Subsequent visitors receive the...

qt6-qtbase security update

An update is available for qt6-qtbase. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. This package contai...

RLSA-2026:98636 Important: qt6-qtbase security update

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security Fixes: qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header CVE-2026-76151 qt: qt: Denial of Service via crafted XML...

qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header

A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...

Important: Red Hat Security Advisory: qt6-qtbase security update

An update for qt6-qtbase is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: qt6-qtbase security update

An update for qt6-qtbase is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header

A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...

RHEL 10 : qt6-qtbase (RHSA-2026:99155)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99155 advisory. Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security...

RHEL 10 : qt6-qtbase (RHSA-2026:98636)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98636 advisory. Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security...

CLEANSTART-2026-GS36887 http-cache-semantics through 4

Security vulnerability affects the npm package. http-cache-semantics through 4...

Security Bulletin: Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in http-cache-semantics

Summary Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in http-cache-semantics. CVE-2026-93748, CVE-2026-93750 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-93748 DESCRIPTION: http-cache-semantics through 4.2.0 fails to properly...

CLSA-2026-1792743662 TuxCare security update for http-cache-semantics (1 CVE)

TuxCare rebuilt http-cache-semantics to address 1 CVE. Fixed in 4.2.0-tuxcare.1...

CLEANSTART-2026-YQ53384 http-cache-semantics through 4

CVE-2026-93748 affects multiple packages. http-cache-semantics through 4. See references for individual vulnerability details...

PT-2026-135374

TuxCare rebuilt http-cache-semantics to address 1 CVE. Fixed in 4.2.0-tuxcare.1...

CVE-2026-76151

A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...

Atlassian Jira Service Management Data Center and Server 11.3.x < 11.3.5 (JSDSERVER-16840)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16840 advisory. - http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when...

Security Bulletin: The Pulse App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Pulse App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-93748 DESCRIPTION: http-cache-semantics...

Information Disclosure http-cache-semantics Dependency in Jira Service Management Data Center

This High severity Information Disclosure vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated attacker...

Information Disclosure http-cache-semantics Dependency in Jira Software Data Center

This High severity Information Disclosure vulnerability was introduced in version 11.3.0 of Jira Software Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated attacker to expose...