OESA-2026-1112 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string...

req 安全漏洞

req is a simple Go HTTP client using Black Magic by roc individual developers. A security vulnerability exists in versions prior to req 3.43.4, which stems from the deliberate garbage in, garbage out design of the cleanHost function in http.go, which may result in unintended requests being sent...

The vulnerability of the Express.js template for Node.js web application development, related to the redirection of URL addresses to unreliable websites used by the incoming component, allows attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Express.js template for Node.js web application development is related to open redirection, involving incorrectly formed URL addresses. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses remotely...

CLSA-2024-1717693264 python2: Fix of CVE-2023-27043

Remove -b option, use original maintainer approach - CVE-2023-27043: reject malformed addresses in email.parseaddr...

CLSA-2024-1711648611 python3.9: Fix of CVE-2023-27043

CVE-2023-27043: reject malformed addresses in email.parseaddr...

Postfix 1.1.x - Denial of Service (2)

source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be exploited...