Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/06/19 9:15 p.m.•26 views

http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`

Impact reverseProxy and reverseProxyRouting matched configured vhosts by substring on the Host header Contains matcher by default. The intended use of these functions in http4k is outbound dispatch e.g. matching AWS service subdomains, per the Contains docstring and test-time composition of fake...

5.9AI score
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/12/03 6:15 p.m.•15 views

CVE-2024-41777

IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

7.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Rows per page
Query Builder