135287 matches found
CVE-2019-10092
CVE-2019-10092: Apache HTTP Server में 'प्रॉक्सी त्रुटि' पृष्ठ के माध्यम से सीमित क्रॉस-साइट स्क्रिप्टिंग Apache HTTP Server 2.4.0-2.4.39 में, modproxy त्रुटि पृष्ठ को प्रभावित करने वाली एक सीमित क्रॉस-साइट स्क्रिप्टिंग समस्या की सूचना मिली थी। एक हमलावर त्रुटि पृष्ठ पर लिंक को दूषित कर सकता है औ...
USN-8890-1: libsoup vulnerabilities
It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-4271 It was discovered that libsoup incorrectly handled certain HTTPS...
CVE-2025-31324
CVE-2025-31324 كيف تعمل طريقة الكشف هذه؟ يقوم القالب بإرسال طلب HTTP GET إلى عنوان URL الأساسي للهدف ويفحص ترويسات الاستجابة لتحديد مثيلات SAP NetWeaver Application Server. تساعد هذه المعلومات في تقييم ما إذا كان النظام قد يكون عرضة لـ CVE-2025-31324. كيف أقوم بتشغيل هذا السكربت؟ 1. قم بتنزيل...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
K000163569: Multiple Apache Tomcat vulnerabilities
Security Advisory Description CVE-2026-75973 Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to...
i18next-http-backend incomplete URL validation permits SSRF
There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...
GHSA-XVQ9-WJP8-HWQF i18next-http-backend incomplete URL validation permits SSRF
There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...
NPM: i18next-http-backend incomplete URL validation permits SSRF
NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...
CVE-2026-4253-Scanner
CVE-2026-42530 — Safe-Check Scanner ماسح جماعي غير تدميري لثغرة use-after-free في NGINX HTTP/3 QUIC اعرف أيًّا من مضيفاتك مكشوف للثغرة — دون تشغيلها إطلاقًا. ⚠️ إخلاء مسؤولية هذه الأداة مخصّصة لاختبارات الأمان المصرَّح بها فقط — أي بنيتك التحتية الخاصة، أو أنظمة لديك إذن كتابي صريح لاختبارها. وهي...
DEBIAN-CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800
The i18next-http-backend library, used for loading translation resources in Node.js , browsers , and Deno , is vulnerable to Server-Side Request Forgery (SSRF) and URL injection prior to version 4.0.2 . The root cause is incomplete URL validation where attacker-controlled language or namespace va...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
EUVD-2026-93433
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2025-29927
🔍 CVE-2025-29927 - كاشف تجاوز الوسيطة في Next.js يساعد هذا الماسح الذكي المبني بلغة بايثون في اكتشاف الثغرة CVE-2025-29927 في تطبيقات Next.js — وهي عبارة عن تجاوز حرج للوسيطة middleware يسمح للمهاجمين بتخطي المصادقة باستخدام ترويسة HTTP مصممة بعناية. 🧠 لا تكتشف الأداة عمليات إعادة التوجيه عبر HTT...
CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-
استشارة أمنية: حقن استجابات HTTP عبر قيم ترويسات استجابة غير مُتحقق منها rouille معرّف CVE المخصص: CVE-2026-66746 الملخص تكتب rouille قيم ترويسات الاستجابة إلى العميل دون التحقق منها من وجود حرف إرجاع السطر أو تغذية السطر. أي تطبيق يضع نصًا متأثرًا من المهاجم في قيمة ترويسة، فإنه يُصدر ترويسات...