6058 matches found
The vulnerability of the GitFlic platform, related to the lack of authentication, allows a malicious user to execute arbitrary HTTP requests on behalf of the server.
The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary HTTP requests on behalf of the server...
USN-7786-1 openssl, openssl1.0 vulnerabilities
Stanislav Fort discovered that OpenSSL incorrectly handled memory when trying to decrypt CMS messages encrypted with password-based encryption. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-9230 Stanislav Fort discovered that OpenSSL ha...
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker Cisco ASA and FTD Software...
The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to execute arbitrary code.
The vulnerability of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming firewalls lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root...
Cisco Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution (cisco-sa-asaftd-webvpn-z5xP8EUB)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability: - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...
Vulnerabilities fixed in Cisco Secure Firewall ASA and FTD
Cisco has fixed vulnerabilities in Cisco Secure Firewall ASA and FTD Software. The vulnerability with reference CVE-2025-20333, is located in how the software validates user input in HTTPS requests. An attacker with valid VPN login credentials can exploit this vulnerability by sending specially...
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker Cisco ASA and FTD Software...
CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper...
PT-2025-39422
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software Cisco Secure Firewall Threat Defense FTD Software Cisco IOS Software Cisco IOS XE Software Cisco IOS XR Software Description A flaw exists in the web services of the listed Cisco...
WAFTest
This repository is an offensive tool for testing web application firewalls WAFs. It contains a collection of test cases and scripts to evaluate the effectiveness of WAFs against various types of attacks. The tool includes test cases for common web application vulnerabilities such as: Command...
parcel 安全漏洞
parcel is a zero-configuration build tool for the web from Parcel open source. A security vulnerability exists in parcel 2.0.0-alpha and earlier versions, which stems from a source validation error that allows a malicious website to send XMLHTTPRequests to the development server and read the...
sqlmap-ctt
sqlmap-CTT ========== sqlmap-CTT is an advanced SQL injection t...
The vulnerability of the read_headers() function in the WEBrick HTTP-server toolset allows attackers to carry out attacks by replacing HTTP requests.
The vulnerability of the WEBrick library for the Ruby programming language interpreter is related to incorrect checking of HTTP requests in the readheader method. Exploiting this vulnerability allows a remote attacker to perform attacks by replacing HTTP requests with malicious content...
ROS-20250905-02
A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...
CVE-2025-58056
The CVE-2025-58056 vulnerability in Netty (affecting 4.1.124.Final and 4.2.0.Alpha3 through 4.2.4.Final) allows HTTP request smuggling when a reverse proxy treats LF as a chunk-size terminator, bypassing CRLF requirements. Netty requires CRLF per HTTP/1.1, but due to LF handling, a proxy can send...
SUSE CVE-2025-55763
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 latest allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of...
UBUNTU-CVE-2025-55763
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 latest allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of...
Server-side Request Forgery (SSRF)
Overview johnbillion/wp-crontrol is a package that allows you to take control of the cron events on your WordPress website. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the wpremoterequest function. An attacker can send arbitrary HTTP requests from the...
PT-2025-33093 · Unknown · Rabidhamster
Name of the Vulnerable Software and Affected Versions: RabidHamster versions 1.25 Description: RabidHamster R4 version 1.25 contains a stack-based buffer overflow due to the unsafe use of sprintf when logging malformed HTTP requests. A remote attacker can exploit this issue by sending a specially...
