Spring Cloud Gateway HTTP Request Smuggling

The vulnerability of the library used to create Spring Cloud Gateway API gateways is related to deficiencies in generating HTTP requests. Exploiting this vulnerability allows a malicious actor to redirect the X-Forwarded-For and Forwarded headers from untrusted proxy servers...

CVE-2023-46839

A vulnerability exists in the Xen hypervisor involving the phantom() function. When PCI devices use phantom functions to generate requests from unpopulated IDs, the system may fail to properly set up the required IOMMU context . Because this failure is not fatal, a primary device might be assigne...

SUSE CVE-2013-1710

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...

Websoft HCM Automation Software Code Execution

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

Firefox DoS

Mozilla Firefox browser contains a vulnerability related to errors in the implementation of a certain type of key verification mechanism in the crypto.generateCRMFRequest method. Exploiting this vulnerability allows malicious actors, operating remotely, to cause a service failure abnormal...

CVE-2013-1710

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...