31318 matches found
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in the TryPathsHandler or TryFilesFilter process. An attacker can manipulate query parameters by crafting a request path containing reserve...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in the TryPathsHandler or TryFilesFilter process. An attacker can manipulate query parameters by crafting a request path containing reserve...
Improper Handling of Case Sensitivity
Overview org.eclipse.jetty:jetty-server is a lightweight highly scalable java based web server and servlet engine. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to improper handling of hostnames in the proxy process. An attacker can bypass access...
Improper Handling of Case Sensitivity
Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to improper handling of hostnames in the proxy process. An attacker can bypass access restrictions by supplying hostnames that differ only in letter casing. Remediation Upgrade...
Malicious code in proxy-rubikis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2026-17887 Malicious code in proxy-rubikis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
CVE-2026-102475
A flaw was found in Eclipse Vert.x HTTP proxy. A remote attacker can cause a Denial of Service DoS by triggering unbounded memory allocation on the server. When the proxy is configured with an intercepting body transformer, buffer limits are not properly enforced, allowing requests to continuousl...
CVE-2024-46256
CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment docker-compose up -d Or you can use the automated script: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL: http://localhost:81 Complete the initial...
DEBIAN-CVE-2026-18660
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
CVE-2026-18660
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
burpflow
BurpFlow BurpFlow is a lightweight Node.js CLI tool that routes HTTP requests through a Burp Suite proxy, enabling security testers to quickly load and analyze reconnaissance URLs inside Burp. 🎯 What is BurpFlow? BurpFlow is a fast, efficient, and minimal recon automation CLI tool designed for...
CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +381 more potentially affected by CVE-2026-18660 via org.eclipse.jetty:jetty-proxy (>=9.4.0.v20161208, <=9.4.58.v20250814)
org.eclipse.jetty:jetty-proxy MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =0.2.10, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.2.10, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.46.0.6-1-3.5 -...
ai.pipestream:pipestream-wiremock-server (>=0.1.1, <=0.1.6), ai.timefold.solver.enterprise:timefold-solver-enterprise-service-test (2.8.0-rc-1) +89 more potentially affected by CVE-2026-18660 via org.eclipse.jetty:jetty-proxy (>=11.0.0, <=11.0.26)
org.eclipse.jetty:jetty-proxy MAVEN version =11.0.0, =0.1.1, =2.2.0, =1.8.2, =2.2.1, =2.2.1, =2.2.1, =8.0.0, =1.14.4, =0.20.41, =1.32.0, =3.0.0-beta-2, =3.0.0-beta-10 and more Source cves: CVE-2026-18660 Source advisory: MEND:CVE-2026-18660...
CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
org.eclipse.jetty.demos:demo-proxy-webapp (>=10.0.0, <=10.0.26), org.eclipse.jetty.demos:demos-jetty-embedded (>=10.0.0, <=10.0.26) +4 more potentially affected by CVE-2026-18660 via org.eclipse.jetty:jetty-proxy (>=10.0.0, <=10.0.26)
org.eclipse.jetty:jetty-proxy MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.10, =5.26.1, =5.27.15 Source cves: CVE-2026-18660 Source advisory: MEND:CVE-2026-18660...
CVE-2026-18660
In Eclipse Jetty, across various versions of "jetty-server", and "jetty-proxy", the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
CVE-2026-18660
In Eclipse Jetty , specifically within the jetty-server and jetty-proxy components, a vulnerability exists where the host whitelist/blacklist performs case-sensitive matching . Because DNS hostnames are case-insensitive, an attacker can bypass these security controls by using a hostname that diff...
