25875 matches found
CVE-2025-49596 MCP Inspector proxy server lacks authentication between the Inspector client and proxy
The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a misinterpretation of input in proxy host matching [CVE-2025-22870]
Summary IBM Watson Speech Services Cartridge is vulnerable to a misinterpretation of input in proxy host matching, caused by improper addressing of an IPv6 zone ID as a hostname component CVE-2025-22870. Proxy host matching is used as part of our speech utilities. This vulnerabilitiy has been...
The vulnerability of the KDC Proxy Service (KPSSVC) on Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the KDC Proxy Service KPSSVC on Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2025-33071
Use after free in Windows KDC Proxy Service KPSSVC allows an unauthorized attacker to execute code over a network...
Malicious code in puppeteer-proxy-http (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f40925e51ac8a3b8f89bbd8ab3a8f34b05e948007dc3b79a88a115191fbee417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in puppeteer-proxy-https (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a65d78de947c8d62190a8040f890764fb57fced064b8b82966de9a4a9a7de30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4941 Malicious code in puppeteer-proxy-https (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a65d78de947c8d62190a8040f890764fb57fced064b8b82966de9a4a9a7de30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mageia: Security Advisory (MGASA-2025-0184)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: python-tornado
Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...
AZL-63866 CVE-2025-4673 affecting package msft-golang for versions less than 1.24.1-3
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-98709 CVE-2025-4673 affecting package golang 1.27.1-1
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
DEBIAN-CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-72128 CVE-2025-4673 affecting package golang for versions less than 1.24.4-1
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
CVE-2025-4673
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-63716 CVE-2025-4673 affecting package golang for versions less than 1.18.8-9
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-78946 CVE-2025-4673 affecting package golang 1.25.7-1
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-63735 CVE-2025-4673 affecting package golang for versions less than 1.23.10-1
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
AZL-63725 CVE-2025-4673 affecting package golang for versions less than 1.22.7-5
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...