2530 matches found
pentest-scripts
Pentest Scripts - Unified Security Testing Framework 🎯 Qui...
AZL-69140 CVE-2025-58186 affecting package msft-golang 1.24.13-1
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Ruby vulnerabilities (USN-7840-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7840-1 advisory. It was discovered that the REXML module bunded into Ruby incorrectly handled parsing XML documents with repeated instances of...
CVE-2025-12365
Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
EUVD-2025-35905
The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all versions up to, and including, 2.7.11. This is due to the plugin trusting client-controlled HTTP headers such as X-Forwarded-For, HTTPCLIENTIP, and similar headers to determine user IP...
PT-2025-43704
Name of the Vulnerable Software and Affected Versions Password Protected plugin for WordPress versions prior to 2.7.12 Description The Password Protected plugin for WordPress is susceptible to authorization bypass through IP address spoofing. This occurs because the plugin relies on...
UBUNTU-CVE-2025-62396
An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...
CVE-2025-62396 Moodle: router (r.php) could expose application directories
An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...
RockyLinux 9 : golang (RLSA-2025:10676)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:10676 advisory. net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 Tenable has extracted the preceding description block directly from th...
EUVD-2013-1871
Malware in sbrugna...
EUVD-2012-4980
Malware in sbrugna...
EUVD-2007-2396
Malware in sbrugna...
EUVD-2019-19256
Malware in sbrugna...
EUVD-2000-1197
Malware in sbrugna...
EUVD-2011-0370
Malware in sbrugna...
EUVD-2006-5860
Malware in sbrugna...
EUVD-2020-24832
Malware in sbrugna...
EUVD-2016-2994
Malware in sbrugna...