Lucene search
+L

921 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/17 12:00 a.m.•12 views

EulerOS 2.0 SP15 : perl-libwww-perl (EulerOS-SA-2026-3790)

According to the versions of the perl-libwww-perl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross- origin redirects.x000D x000D On...

6.5CVSS6.4AI score0.00415EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/17 12:00 a.m.•8 views

EulerOS 2.0 SP15 : perl-libwww-perl (EulerOS-SA-2026-3815)

According to the versions of the perl-libwww-perl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross- origin redirects.x000D x000D On...

6.5CVSS6.4AI score0.00415EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•3 views

Astra Linux – Vulnerability in libwww-perl

LWP::UserAgent versions before 6.83 suffer from a security flaw related to Authorization and Proxy-Authorization headers during cross-origin redirections. In a 3xx response, the redirection handler only removes the Host and Cookie headers before issuing the subsequent request. The Authorization a...

6.5CVSS6.5AI score0.00415EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•13 views

EulerOS 2.0 SP12 : perl-libwww-perl (EulerOS-SA-2026-3372)

According to the versions of the perl-libwww-perl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross- origin redirects. On a 3xx...

6.5CVSS6.4AI score0.00415EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•12 views

EulerOS 2.0 SP12 : perl-libwww-perl (EulerOS-SA-2026-3297)

According to the versions of the perl-libwww-perl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross- origin redirects. On a 3xx...

6.5CVSS6.4AI score0.00415EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•12 views

The vulnerability in the lib/LWP/UserAgent.pm module, a set of modules for working with LWP::UserAgent web resources, allows a perpetrator to access confidential data.

The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

6.8CVSS6.9AI score0.00415EPSS
SaveExploits0References12Affected Software5
RedhatCVE
RedhatCVE
•added 2026/05/25 7:33 a.m.•22 views

CVE-2026-8368

A flaw was found in LWP::UserAgent, a component of perl-libwww-perl. This vulnerability allows a remote attacker to obtain a user's credentials by redirecting a request to an attacker-controlled host. When processing a redirect, the LWP::UserAgent fails to properly strip Authorization and...

6.5CVSS5.7AI score0.00415EPSS
SaveExploits0References7
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:01 a.m.•20 views

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

...

6.5CVSS5.8AI score0.00415EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/05/13 2:25 p.m.•24 views

SUSE CVE-2026-8368

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization and Proxy-Authorization headers are se...

5.3CVSS5.8AI score0.00415EPSS
SaveExploits0References6
OSV
OSV
•added 2026/05/12 3:16 p.m.•9 views

AZL-86907 CVE-2026-8368 affecting package perl-libwww-perl for versions less than 6.83-1

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization and Proxy-Authorization headers are se...

6.5CVSS6.6AI score0.00415EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/12 3:16 p.m.•21 views

CVE-2026-8368

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization and Proxy-Authorization headers are se...

6.5CVSS5.8AI score0.00415EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/12 2:01 p.m.•14 views

CVE-2026-8368 LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization and Proxy-Authorization headers are se...

5.8AI score0.00415EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•2 views

CVE-2026-8368: Insufficiently Protected Credentials

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization and Proxy-Authorization headers are se...

6.5CVSS5.6AI score0.00415EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2023/08/29 12:00 a.m.•315 views

i-Gallery 3.4 Database Disclosure

==================================================================================================================================== | Title : i-Gallery v3.4 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bit | |...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/08/16 12:00 a.m.•335 views

ExcessWeb And Network CMS 4.0 Database Disclosure

==================================================================================================================================== | Title : ExcessWeb & Network CMS v4.0 Database Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefo...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/08/08 12:00 a.m.•284 views

Data Driven CMS 0.4.1 Database Disclosure

==================================================================================================================================== | Title : Data Driven CMS v0.4.1 database disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/07/13 12:00 a.m.•414 views

Blackboard 2.0.2 Database Disclosure

==================================================================================================================================== | Title : blackboard v 2.0.2 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bit | ...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/07/12 12:00 a.m.•232 views

Banner RotatorCMS 1.0 Database Disclosure

==================================================================================================================================== | Title : Banner RotatorCMS v1.0 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bi...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/05/24 12:00 a.m.•299 views

A Cart 1.0 Database Disclosure

==================================================================================================================================== | Title : A cart 1.0 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bit | | Vendor...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/01/10 12:00 a.m.•543 views

WordPress Slider Revolution 4.6.5 Shell Upload

==================================================================================================================================== | Title : WordPress - Slider Revolution 4.6.5 WordPress - Slider Revolution 4.6.5 shell upload 0-day exploit | | Author : indoushka | | Tested on : windows 10...

7.4AI score
SaveExploits0
Rows per page
Query Builder