279 matches found
CVE-2025-66570
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...
TencentOS Server 4: cpp-httplib (TSSA-2025:0524)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0524 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library
A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-pip-wheel python3.12-pip python3.12-pip-wheel urllib3
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-pip-wheel python3.12-pip python3.12-pip-wheel urllib3 Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version...
[SECURITY] Fedora 43 Update: rust-prometheus_exporter-0.8.5-5.fc43
Helper libary to export prometheus metrics using tiny-http...
CVE-2025-61689
HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...
EUVD-2021-1600
Malware in sbrugna...
EUVD-2021-1461
Malware in sbrugna...
EUVD-2021-1440
Malware in sbrugna...
EUVD-2015-5686
Malware in sbrugna...
EUVD-2023-0227
Malicious code in bioql PyPI...
EUVD-2022-0341
Malicious code in bioql PyPI...
EUVD-2025-19196
Malicious code in bioql PyPI...
EUVD-2024-1565
Malicious code in bioql PyPI...
EUVD-2025-17564
Malicious code in bioql PyPI...
EUVD-2025-15741
Malicious code in bioql PyPI...
CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library
A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...
requests: Requests vulnerable to .netrc credentials leak via malicious URLs
A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...
Insufficient sanitization of Host header in net/http
...
Linux Distros Unpatched Vulnerability : CVE-2023-29197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a...