Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 12:30 a.m.12 views

CVE-2025-66803

Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays e.g. delaying requests based on sequence or...

4.8CVSS5.6AI score0.00063EPSS
Exploits1References1
NVD
NVD
added 2026/01/20 7:15 p.m.5 views

CVE-2025-66803

Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays e.g. delaying requests based on sequence or...

4.8CVSS0.00063EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/20 12:0 a.m.1 views

CVE-2025-66803

Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays e.g. delaying requests based on sequence or...

5.5AI score0.00063EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.5 views

PT-2026-3642

Name of the Vulnerable Software and Affected Versions Hotwired Turbo versions prior to 8.0.0 Description A race condition exists in the turbo-frame element handler. This issue can cause logout operations to fail when delayed frame responses reapply session cookies after a user has logged out...

4.8CVSS5.5AI score0.00063EPSS
Exploits1References11
ATTACKERKB
ATTACKERKB
added 2026/01/20 12:0 a.m.4 views

CVE-2025-66803

Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays e.g. delaying requests based on sequence or...

4.8CVSS5.6AI score0.00063EPSS
Exploits1References4
Veracode
Veracode
added 2020/08/06 9:27 p.m.20 views

Information Disclosure

glib is vulnerable to information disclosure. The vulnerability exists as GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is...

5.9CVSS5.2AI score0.00584EPSS
Exploits1References9Affected Software1
RedhatCVE
RedhatCVE
added 2020/04/09 3:20 a.m.27 views

CVE-2020-6750

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays...

6.8CVSS1.7AI score0.00584EPSS
Exploits1References3
NVD
NVD
added 2020/01/09 8:15 p.m.22 views

CVE-2020-6750

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays...

5.9CVSS5.6AI score0.00584EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2020/01/09 8:15 p.m.27 views

CVE-2020-6750

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays...

5.9CVSS6.5AI score0.00584EPSS
Exploits1References1
Prion
Prion
added 2020/01/09 8:15 p.m.19 views

Code injection

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays...

4.3CVSS5.5AI score0.00584EPSS
Exploits1References6Affected Software2
AlpineLinux
AlpineLinux
added 2020/01/09 7:23 p.m.45 views

CVE-2020-6750

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays...

5.9CVSS5.6AI score0.00584EPSS
Exploits1
GitLab Advisory Database
GitLab Advisory Database
added 2020/01/09 12:0 a.m.48 views

Information Exposure

GSocketClient in GNOME GLib may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest...

5.9CVSS1AI score0.00584EPSS
Exploits1References2Affected Software1
exploitpack
exploitpack
added 2016/07/18 12:0 a.m.795 views

OpenSSHd 7.2p2 - Username Enumeration

OpenSSHd 7.2p2 - Username Enumeration Source: http://seclists.org/fulldisclosure/2016/Jul/51 -------------------------------------------------------------------- User Enumeration using Open SSHD =Latest version. ------------------------------------------------------------------- Abstract:...

4.3CVSS6.8AI score0.90046EPSS
Exploits12
Rows per page
Query Builder