333 matches found
go-exploit-cache
go-exploit-cache go-exploit-cache builds an HTTP cache SQLite database used by the go-exploit framework to enable cross-exploit sharing and scanless target verification. Instead of actively connecting to targets, go-exploit can consult the cache to run version checks and other scans using...
CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter
CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parameter Overview A web cache uses only the URL path as the cache key, ignoring query parameters. An attacker can append a malicious payload to an unkeyed parameter e.g., utmcampaign and poison the cache. Subsequent visitors receive the...
CLEANSTART-2026-GS36887 http-cache-semantics through 4
Security vulnerability affects the npm package. http-cache-semantics through 4...
Security Bulletin: Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in http-cache-semantics
Summary Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in http-cache-semantics. CVE-2026-93748, CVE-2026-93750 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-93748 DESCRIPTION: http-cache-semantics through 4.2.0 fails to properly...
CLSA-2026-1792743662 TuxCare security update for http-cache-semantics (1 CVE)
TuxCare rebuilt http-cache-semantics to address 1 CVE. Fixed in 4.2.0-tuxcare.1...
CLEANSTART-2026-YQ53384 http-cache-semantics through 4
CVE-2026-93748 affects multiple packages. http-cache-semantics through 4. See references for individual vulnerability details...
PT-2026-135374
TuxCare rebuilt http-cache-semantics to address 1 CVE. Fixed in 4.2.0-tuxcare.1...
CVE-2026-76151
A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...
Atlassian Jira Service Management Data Center and Server 11.3.x < 11.3.5 (JSDSERVER-16840)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16840 advisory. - http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when...
Security Bulletin: The Pulse App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Pulse App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-93748 DESCRIPTION: http-cache-semantics...
Information Disclosure http-cache-semantics Dependency in Jira Service Management Data Center
This High severity Information Disclosure vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated attacker...
Information Disclosure http-cache-semantics Dependency in Jira Software Data Center
This High severity Information Disclosure vulnerability was introduced in version 11.3.0 of Jira Software Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated attacker to expose...
Astra Linux – Vulnerability in symfony
Symfony is a PHP framework for web and console applications, along with a set of reusable PHP components. The Symfony HTTP cache system functions as a reverse proxy: it caches entire responses including headers and returns them to clients. In a recent change to the AbstractSessionListener,...
PT-2026-122763
Security vulnerability affects the renovate package. http-cache-semantics through 4...
ROOT-APP-NPM-CVE-2026-93748 CVE-2026-93748 in http-cache-semantics - Patched by Root
Root has patched CVE-2026-93748 in the http-cache-semantics package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-25881 CVE-2022-25881 in http-cache-semantics - Patched by Root
Root has patched CVE-2022-25881 in the http-cache-semantics package for Root:npm. Multiple fixed versions available...
qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header
A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...
qt5-qtbase: qt6-qtbase: qt: Denial of Service via excessively large HTTP Cache-Control header
A flaw was found in the QtNetwork module of the Qt Framework. This out-of-bounds read vulnerability allows a remote attacker to cause a denial of service application crash. This occurs when an application using QNetworkAccessManager processes an excessively large HTTP Cache-Control header value...
PT-2026-117869
Security vulnerability affects the n8n package. http-cache-semantics through 4...
CVE-2025-12999
A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...