837 matches found
curl: Cross‑origin cookies leak and injection risk when using a custom Host header
Summary When a custom hostname is specified, it is used for cookie matching if the cookie engine is also enabled for this transfer. This matching persists in cross-origin redirects despite that the originally supplied hostname is removed. cookiehost is set from a custom Host header: lib/http.c...
curl: Cookie Max-Age Integer Overflow Vulnerability
Summary: The cookie parsing code in lib/cookie.c contains an integer overflow vulnerability when processing the Max-Age attribute of HTTP cookies. The vulnerable code attempts to add the max-age value to the current timestamp without adequate overflow protection While the code includes an overflo...
CVE-2008-7295
Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...
TencentOS Server 4: firefox (TSSA-2024:0162)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0162 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
EUVD-2013-3148
Malware in sbrugna...
EUVD-2008-6029
Malware in sbrugna...
EUVD-2009-0153
Malware in sbrugna...
EUVD-2011-4656
Malware in sbrugna...
EUVD-2012-4771
Malware in sbrugna...
EUVD-2014-8476
Malware in sbrugna...
EUVD-2014-1374
Malware in sbrugna...
EUVD-2015-4013
Malware in sbrugna...
EUVD-2016-5693
Malware in sbrugna...
EUVD-2017-18424
Malware in sbrugna...
EUVD-2005-0627
Malware in sbrugna...
EUVD-2012-0834
Malware in sbrugna...
EUVD-2009-0361
Malware in sbrugna...
EUVD-2022-0109
Malicious code in bioql PyPI...