549 matches found
CVE-2026-30852
Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the...
UBUNTU-CVE-2026-30852
Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the...
Feathers information leakage vulnerability
Feathers is a lightweight web framework developed by Feathers OpenSource. It is used to create APIs and real-time applications using TypeScript or JavaScript. Feathers versions 5.0.39 and earlier contained an information leakage vulnerability. This vulnerability stemmed from the fact that all HTT...
GHSA-9M9C-VPV5-9G85 Feathers exposes internal headers via unencrypted session cookie
All HTTP request headers are stored in the session cookie, which is signed but not encrypted, exposing internal proxy/gateway headers to clients. The OAuth service stores the complete headers object in the session: javascript //...
Node.js: Denial of Service via `__proto__` header name in `req.headersDistinct` (Uncaught `TypeError` crashes Node.js process)
Vulnerability description not provided...
CVE-2026-22794: Origin Validation Error
Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset / email verification links in emails can be...
OESA-2025-2854 cpp-httplib security update
A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled...
EUVD-2025-201455
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...
Proxy Server DoS
The vulnerability of a proxy server with extended filtering functions for web content, such as Privoxy, is related to insufficient validation of input data in the “processencryptedrequestheaders” function. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2012-4010
Malware in sbrugna...
EUVD-2019-11337
Malware in sbrugna...
EUVD-2000-0895
Malware in sbrugna...
EUVD-2020-2139
Malware in sbrugna...
EUVD-2006-0059
Malware in sbrugna...
EUVD-2008-4281
Malware in sbrugna...
EUVD-2020-26143
Malware in sbrugna...
EUVD-2005-0646
Malware in sbrugna...
EUVD-2008-0902
Malware in sbrugna...