29 matches found
EUVD-2026-36243
Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.9.1, boruta session cookies and the identity “remember me” cookie were set without the Secure attribute. In deployments where users could...
PYSEC-2026-125
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the setsessioncookiesecure beforerequest handler in src/pyload/webui/app/init.py reads the X-Forwarded-Proto header from any HTTP request without validating that the request originates from a trusted prox...
CVE-2026-40594 pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the setsessioncookiesecure beforerequest handler in src/pyload/webui/app/init.py reads the X-Forwarded-Proto header from any HTTP request without validating that the request originates from a trusted prox...
GHSA-MP82-FMJ6-F22V pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)
Summary The setsessioncookiesecure beforerequest handler in src/pyload/webui/app/init.py reads the X-Forwarded-Proto header from any HTTP request without validating that the request originates from a trusted proxy, then mutates the global Flask configuration SESSIONCOOKIESECURE on every request...
PT-2025-49823
Name of the Vulnerable Software and Affected Versions versions prior to the fix for CVE-2025-41752 Description An XSS vulnerability exists in the pxc portSfp.php file. An unauthenticated remote attacker can exploit this to trick an authenticated user into clicking a malicious link, potentially...
EUVD-2008-3648
Malware in sbrugna...
EUVD-2008-3647
Malware in sbrugna...
EUVD-2020-19270
Malware in sbrugna...
EUVD-2014-3113
Malware in sbrugna...
EUVD-2009-1472
Malware in sbrugna...
EUVD-2021-15658
Malware in sbrugna...
EUVD-2019-1114
Malware in sbrugna...
EUVD-2020-26027
Malware in sbrugna...
EUVD-2014-4611
Malware in sbrugna...
EUVD-2009-5008
Malware in sbrugna...
EUVD-2022-28960
Malicious code in bioql PyPI...
EUVD-2023-46386
Malicious code in bioql PyPI...
EUVD-2025-18180
Malicious code in bioql PyPI...