4841 matches found
CVE-2025-61689
CVE-2025-61689 affects the Julia HTTP client/server library HTTP.jl. Prior to version 1.10.19, it failed to validate illegal characters in header names/values, enabling CRLF-based header injection and response splitting. Reported impact includes cache poisoning, XSS, and session fixation. The iss...
PT-2025-41579
Name of the Vulnerable Software and Affected Versions HTTP.jl versions prior to 1.10.19 Description HTTP.jl, an HTTP client and server for the Julia programming language, did not properly validate header names and values, creating a risk of header injection and response splitting. This could lead...
Julia HTTP.jl 注入漏洞
Julia HTTP.jl is a Julia open source HTTP protocol for Julia. An injection vulnerability exists in Julia HTTP.jl versions prior to 1.10.19, which stems from illegal characters in unvalidated header names and values, and could lead to HTTP response splitting and header injection attacks...
CVE-2025-61689: Improper Neutralization of CRLF Sequences in HTTP Headers
HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...
PT-2025-45887
Description The URIs.jl and HTTP.jl packages allowed the construction of URIs containing CR/LF characters. If user input was not otherwise escaped or protected, this can lead to a CRLF injection attack. With this simple Julia code, you can inject a custom header named Foo with the value bar: juli...
SUSE CVE-2022-50471
In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Accommodate VMA splitting Prior to this commit, the gntdev driver code did not handle the following scenario correctly with paravirtualized PV Xen domains: User process sets up a gntdev mapping composed of two grant...
HTTP Response Splitting
Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the Content-Disposition header. An attacker can manipulate the file extension of downloaded vCard files by supplying crafted input, potentially leading to user confusion or further exploitation. Remediation...
EUVD-2012-0029
Malware in sbrugna...
EUVD-2015-0026
Malware in sbrugna...
EUVD-2015-0005
Malware in sbrugna...
EUVD-2020-0233
Malware in sbrugna...
EUVD-2017-14944
Malware in sbrugna...
EUVD-2014-2009
Malware in sbrugna...
EUVD-2012-3279
Malware in sbrugna...
EUVD-2010-4538
Malware in sbrugna...
EUVD-2010-2765
Malware in sbrugna...
EUVD-2006-4493
Malware in sbrugna...
EUVD-2014-9460
Malware in sbrugna...