Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation

Summary Caddy's forwardauth directive with copyheaders generates conditional header-set operations that only fire when the upstream auth service includes the named header in its response. No delete or remove operation is generated for the original client-supplied request header with the same name...

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

Hotfix update for Exchange Server 2019 CU14: April 18, 2025 (KB5050673)

Hotfix update for Exchange Server 2019 CU14: April 18, 2025 KB5050673 Hotfix update for Microsoft Exchange Server 2019 CU14 was released on April 18, 2025. It includes fixes for non-security issues and introduces new features. These fixes and features will also be included in later cumulative...

CVE-2024-54677

creationtimestamp| type| source ---|---|--- 2024-12-17 12:38:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113668199653283050 2024-12-17 15:06:14+00:00| seen| https://t.me/cvedetector/13090 2024-12-18 12:14:46+00:00| seen| https://t.me/CyberBulletin/26846...

Pixel Watch Security Bulletin—December 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-11-05 or later address all issues in this bulletin and all issues in the November 2024 Android Security Bulletin and all...

What’s New for Developers: November 2024

As the holiday season approaches and we bid farewell to another year, there’s no slowing down in developer content and releases...

CVE-2024-11998

creationtimestamp| type| source ---|---|--- 2024-11-30 09:32:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113571208961507291 2024-11-30 22:25:59+00:00| seen| https://t.me/cvedetector/11700...

CVE-2024-11995

creationtimestamp| type| source ---|---|--- 2024-11-29 21:04:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113568270995152948 2024-11-30 14:04:25+00:00| seen| https://t.me/cvedetector/11684...

CVE-2024-35368

creationtimestamp| type| source ---|---|--- 2024-11-29 19:58:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113568010068124760 2024-11-30 14:04:34+00:00| seen| https://t.me/cvedetector/11691 2025-05-05 19:43:30+00:00| seen|...

CVE-2024-36612

creationtimestamp| type| source ---|---|--- 2024-11-29 19:43:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113567949816057557 2024-11-30 14:04:38+00:00| seen| https://t.me/cvedetector/11692...

CVE-2024-53848

creationtimestamp| type| source ---|---|--- 2024-11-29 18:56:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567765118810869 2024-11-30 14:04:41+00:00| seen| https://t.me/cvedetector/11696...

GHSA-Q6MV-284R-MP36

creationtimestamp| type| source ---|---|--- 2024-11-29 18:56:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567765118810869...

CVE-2024-36616

creationtimestamp| type| source ---|---|--- 2024-11-29 18:41:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567706088793753 2025-10-16 07:46:53+00:00| seen| https://gist.github.com/Darkcrai86/d4b1a38863b6a56fd60b4594084a9b41...

CVE-2024-36615

creationtimestamp| type| source ---|---|--- 2024-11-29 18:41:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567706073953125...

CVE-2024-11013

creationtimestamp| type| source ---|---|--- 2024-11-29 08:09:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113565224033105350...

CVE-2024-45495

creationtimestamp| type| source ---|---|--- 2024-11-29 04:56:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113564461785540005...

CVE-2024-36618

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

CVE-2024-11103

creationtimestamp| type| source ---|---|--- 2024-11-28 10:04:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113560012257677452...

CVE-2024-36466

creationtimestamp| type| source ---|---|--- 2024-11-28 07:27:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113559396561098054 2024-12-02 19:00:06+00:00| seen| https://t.me/truesecator/6498 2024-12-04 05:44:04+00:00| seen|...

CVE-2018-9352

creationtimestamp| type| source ---|---|--- 2024-11-27 22:39:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113557318483411013...