CVE-2026-7055

A security vulnerability has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The...

EUVD-2014-1266

Malware in sbrugna...

CVE-2019-15600

A Path traversal exists in httpserver which allows an attacker to read arbitrary system files...

CVE-2014-125098

A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...

BIT-FLUENT-BIT-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2014-125098

A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...

Cross site scripting

A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...

CVE-2014-125098 Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting

A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...

CVE-2014-125098

Dart http_server up to 0.9.5 is affected in the VirtualDirectory handler (lib/src/virtual_directory.dart). Malicious manipulation of request.uri.path enables cross-site scripting. The issue can be exploited remotely. Remediation: upgrade to version 0.9.6 (patch: 27c1cbd8125bb0369e675eb72e48218496...

CVE-2014-125098 Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting

A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...

http_server 跨站脚本漏洞

httpserver is an HTTP server utility class. A cross-site scripting vulnerability exists in Dart httpserver 0.9.5 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the request.uri.path parameter...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Exploitation of CVE-202...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

Null pointer dereference

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

CVE-2021-27186

Fluent Bit 1.6.10 is affected by CVE-2021-27186 due to a NULL pointer dereference caused by an unvalidated flb_malloc return in flb_avro.c or in the HTTP server endpoint at http_server/api/v1/metrics.c. This vulnerability can lead to a crash; exploitation details or active exploit status are not ...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

GHSA-754X-4JWP-CQP6 Cross-Site Scripting in http_server

All versions of httpserver are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider usi...

Cross-Site Scripting in http_server

All versions of httpserver are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider usi...

CVE-2019-15600

A Path traversal exists in httpserver which allows an attacker to read arbitrary system files...

CVE-2019-15600

A Path traversal exists in httpserver which allows an attacker to read arbitrary system files...