2351 matches found
CVE-2026-102476
The io.vertx:vertx-core component in Eclipse Vert.x versions [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to a security flaw in the Vert.x HTTP client . The root cause is an inefficient SSL context cache where the cache key does not fully reflect the SSL semantics of the de...
CVE-2026-60021
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021 Gitea GitLab migration denial of service
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021 Gitea GitLab migration denial of service
Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request...
CVE-2026-60021
Gitea is vulnerable to an uncontrolled resource consumption flaw during the initial GitLab migration version probe . The application uses an HTTP client without a timeout and fails to attach the migration task's cancellation context. An authenticated user capable of starting migrations can point ...
PT-2026-114182
Name of the Vulnerable Software and Affected Versions Renovate versions prior to 44.79.0 Description An issue exists where users can trigger server-side request forgery, a flaw that allows a server to be coerced into making requests to an unintended location. This occurs when the shared HTTP clie...
CVE-2026-101899
The Axios HTTP client (versions 1.15.0 through 1.20.0 ) contains a vulnerability where the shouldBypassProxy function incorrectly treats NO_PROXY CIDR entries as textual hostname suffixes instead of evaluating the network range. This causes requests targeting addresses covered by CIDR bypass rule...
CVE-2026-109245
A flaw was found in FreeRDP. This vulnerability leads to information disclosure because the internal HTTP client fails to verify Transport Layer Security TLS server certificates or hostnames. An on-path network attacker positioned between the client and identity provider can exploit this flaw by...
Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2026-3161)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3161 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...
Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2026-3163)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3163 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...
Important: php8.5
Issue Overview: The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined...
Amazon Linux 2 : php (ALASPHP8.2-2026-014)
The version of php installed on the remote host is prior to 8.2.34-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2026-014 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough...
Important: php8.4
Issue Overview: The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined...
forbidden
Forbidden Bypass códigos de estado de respuesta HTTP 4xx y más. La herramienta está basada en Python Requests, PycURL y HTTP Client. Probado en Kali Linux v2024.2 64-bit. Hecho con fines educativos. ¡Espero que sea útil! Planes futuros: Añadir la opción silent para suprimir la salida de consola...
CLEANSTART-2026-DH24226 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the n8n package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-EI20913 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the n8n package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-MT76481 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the n8n package. Axios is a promise-based HTTP client for the browser and Node...
CVE-2026-107938 Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...