97 matches found
OESA-2026-4356 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: One-Byte Buffer OverRead in HTTP Request Header Parsing。CVE-2024-28124...
PT-2026-125070
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: One-Byte Buffer OverRead in HTTP Request Header Parsing。CVE-2024-28124...
CLEANSTART-2026-MQ00302 specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2...
CVE-2026-103471
The restbed library, versions through 5.0.0 , is vulnerable to a Denial of Service (DoS) condition due to unbounded header buffering . The software fails to enforce a maximum size limit on HTTP request headers, enabling remote unauthenticated attackers to open TCP connections and stream bytes ind...
CVE-2026-103471 restbed through 5.0.0 Denial of Service via Unbounded Header Buffering
restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TCP connections and stream bytes indefinitely without sending the header delimiter, forcing the server to allocate...
CVE-2026-86350: Inconsistent Interpretation of HTTP Requests
Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
PT-2026-76774
Name of the Vulnerable Software and Affected Versions ACME mini httpd versions prior to 1.31 Description A remote attacker can cause a denial of service through the HTTP request header parser within the handle request function. Recommendations Update ACME mini httpd to version 1.31 or later. As a...
CVE-2026-68005: Uncontrolled Resource Consumption
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception in Node.js HTTP request handling. The flaw triggers when an incoming request includes a header named proto and the server application accesses req.headersDistinct. This causes dest"proto" to incorrectly resolve to...
EUVD-2020-0334
Malware in sbrugna...
EUVD-2018-0797
Malware in sbrugna...
EUVD-2023-35120
Malicious code in bioql PyPI...
EUVD-2022-47952
Malicious code in bioql PyPI...
CVE-2025-52924: Improper Neutralization of Special Elements used in an SQL Command
In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header...
CVE-2023-49952
Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header...
BIT-MASTODON-2023-49952
Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header...
BIT-MASTODON-2024-34535
In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header...
