137868 matches found
CVE-2026-60021
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
EUVD-2026-101152
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...
CVE-2026-91881
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...
CVE-2026-91881
The Dell Terraform Provider for Redfish contains a Critical Improper Certificate Validation vulnerability (CWE-295) in its HTTP transport component (versions prior to 1.6.2 ). The root cause is that TLS certificate verification is unconditionally disabled in the base HTTP transport. This allows a...
JNDI-Injection-Exploit-Plus
JNDI-Injection-Exploit-Plus 中文 README Description JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to tes...
EUVD-2026-101119
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject...
Request body injection in HTTP/3
Request body injection in HTTP/3 Severity: medium CVE-2026-95101 Not vulnerable: 1.31.7+, 1.30.6+ Vulnerable: 1.25.0-1.31.6...
CVE-2026-95101
A vulnerability exists in the ngx_http_v3_module module within NGINX Plus and NGINX Open Source . When utilizing HTTP/3 with the proxy_request_buffering on directive, an unauthenticated attacker can perform data injection into the proxied request. This is a data plane issue only and does not invo...
CVE-2026-95101 NGINX ngx_http_v3_module vulnerability
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject...
CVE-2026-78231
The Gitea platform is vulnerable to a blind Server-Side Request Forgery (SSRF) via its OpenID sign-in verification flow. When OpenID sign-in is enabled, the application processes unauthenticated GET requests to "/user/login/openid" and passes attacker-controlled assertion parameters into the Open...
CVE-2026-78231 Gitea blind SSRF through OpenID assertion verification
When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services...
CVE-2026-73804
Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...
CVE-2026-73804 Gitea API token scope escalation through HTTP signatures
Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...
CVE-2026-73804
Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...
CVE-2026-73804
Gitea is vulnerable to API token scope escalation via HTTP signatures due to a flaw in how request scopes are validated. An attacker with a token possessing only the write:user scope can use that token to register an attacker-controlled SSH public key on the token owner's account via the POST /ap...
CVE-2026-73804 Gitea API token scope escalation through HTTP signatures
Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...
CVE-2026-60021
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021 Gitea GitLab migration denial of service
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021
The Gitea GitLab migration downloader is vulnerable to a Denial of Service (DoS) attack because it uses an HTTP client for version probes without a timeout and fails to attach the migration task's cancellation context . An authenticated user capable of starting migrations can trigger a request to...
CVE-2026-60021 Gitea GitLab migration denial of service
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...