CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

872 matches found

CVE•added 2025/11/10 12:0 a.m.•102 views

CVE-2025-60876

CVE-2025-60876 affects BusyBox wget up to 1.3.7. The issue stems from accepting raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target, allowing the request-line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape, a raw s...

6.5CVSS6.5AI score0.00258EPSS

Exploits1References4Affected Software1

NVD•added 2025/10/27 8:15 p.m.•6 views

CVE-2025-59151

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface before 6.3 is vulnerable to Carriage Return Line Feed CRLF injection. When a request is made to a file ending with the .lp extension, t...

8.2CVSS0.00398EPSS

Exploits1References1

CVE•added 2025/10/27 7:42 p.m.•11 views

CVE-2025-59151

Pi-hole Admin Interface prior to 6.3 is vulnerable to CRLF injection via redirects on requests for files ending with .lp, allowing an attacker to inject arbitrary HTTP response headers and potentially affect session fixation, cache poisoning, and weakening of CSP or X-XSS-Protection. Root cause: ...

8.2CVSS6.9AI score0.00398EPSS

Exploits1References1Affected Software1

OSV•added 2025/10/27 7:42 p.m.•5 views

CVE-2025-59151 Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection

8.2CVSS7.3AI score0.00398EPSS

Exploits1References3

NVD•added 2025/10/10 5:15 p.m.•7 views

CVE-2025-61689

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS0.00311EPSS

Exploits0References2