CVE-2026-82255 gitoxide 0.25.4 HTTP Credential Leak via Redirect

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak in the curl-based transport backend . The root cause is that credential validation checks the original URL rather than the effective URL after a redirect, allowing credentials to be sent to attacker-controlled destinations via cross-do...

EUVD-2026-67581

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

CVE-2026-82247 gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

CVE-2026-82247

CVE-2026-82247 affects the gix-url crate (≤ 0.32.0) within the gitoxide Rust library. Its hand-rolled URL parser fails to treat ? or # as authority terminators per RFC 3986 , causing gix-transport 's HTTP redirect identity guard (can_reuse_identity) to compare the wrong host and fail open . An at...

CVE-2026-82247 gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

EUVD-2026-67699

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

CVE-2017-8225-EXPLOIT

CVE-2017-8225 - GoAhead System.ini-Leck Diese Schwachstelle betrifft WIFICAM-Geräte, bei denen es sich um drahtlose IP-Kameras P2P handelt. Sie entsteht durch einen Fehler bei der korrekten Validierung von .ini-Dateien, die kritische Anmeldeinformationen speichern. Ein versierter Angreifer kann...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

LinksysLeaks

LinksysLeaks Script Python3 per scansionare dispositivi Linksys smart wifi vulnerabili a CVE-2014-8244 Questo script è stato creato per aiutarmi a trovare dispositivi smart wifi vulnerabili che perdono informazioni sensibili, noto come CVE-2014-8244. Hai la possibilità di scansionare un singolo I...

opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env opencast cve-2021-43821 Umgebung für Sicherheitslücke durch Offenlegung sensibler Informationen Reproduktionsartikel: https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

CVE-2025-44203

CVE-2025-44203: HotelDruid 3.0.0 / 3.0.7 Divulgazione di informazioni sensibili e DoS Riepilogo HotelDruid 3.0.0 e 3.0.7 contengono una race condition sull'endpoint di setup creadb.php, raggiungibile prima che il setup sia completato. Ha due impatti, entrambi derivanti dalla stessa race persa: un...

CVE-2021-41773

CVE-2021-41773 È stata riscontrata una vulnerabilità in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49-2.4.50. Un attaccante potrebbe utilizzare un attacco di path traversal per mappare gli URL a file al di fuori della document root prevista. Se i file al di...

AZL-98096 CVE-2026-80662 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80650

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

AZL-98124 CVE-2026-80650 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Autore: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ SOLO A SCOPO EDUCATIVO Ambiente di laboratorio e script di exploit per la critica vulnerabilità di perdita di memoria non autenticata in MongoDB Server. 📋 Indice Panoramica della vulnerabilità Versioni interessate...

cve-2023-31346-poc

Perdita di memoria del firmware Il codice qui mira a dimostrare le perdite di memoria negli header dei messaggi guest e nel messaggio guest della richiesta CPUID. Prerequisiti Installare rustup. Installare un kernel Linux con supporto host SEV-SNP. Ho usato un kernel con alcune mie patch...