curl: curl: Cookie injection via malicious HTTP server using super cookies

A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to...

EUVD-2022-42880

Malicious code in bioql PyPI...

The vulnerability of VideoGrace software, related to insufficient verification of the authenticity of executed requests, allows a hacker to carry out a CSRF attack.

The vulnerability of VideoGrace video conferencing software lies in insufficient verification of the authenticity of the requests being made. Exploiting this vulnerability could allow an attacker to execute a CSRF attack...