CVE-2019-25735

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code...

CVE-2019-25735

AllPlayer 7.4 has a local buffer overflow in URL handling that allows an attacker to overwrite SEH pointers with a crafted long URL via the Open URL dialog, enabling SEH-based code execution with user privileges. The vulnerability is local, requires no user interaction beyond URL input, and the i...

EUVD-2019-20171

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code...

CVE-2019-25735 AllPlayer 7.4 Local Buffer Overflow via SEH Unicode

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code...

CVE-2019-25735 AllPlayer 7.4 Local Buffer Overflow via SEH Unicode

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code...

CVE-2026-9548

creationtimestamp| type| source ---|---|--- 2026-06-04 13:20:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpnwevta2j...

CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...

CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...

CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...

EUVD-2026-34262

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...

EUVD-2026-32016

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks...

GHSA-86QP-5C8J-P5MR Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Summary In affected versions, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the pa...

CVE-2026-50224

creationtimestamp| type| source ---|---|--- 2026-06-04 11:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhjzfg6px2x...

CVE-2026-50225

creationtimestamp| type| source ---|---|--- 2026-06-04 11:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhimmvm3s2b...

CVE-2026-47320

creationtimestamp| type| source ---|---|--- 2026-06-04 11:06:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhi6a6h2j2k...

CVE-2026-49510

creationtimestamp| type| source ---|---|--- 2026-06-04 11:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhyb3bfo22...

CVE-2026-10800

creationtimestamp| type| source ---|---|--- 2026-06-04 10:59:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhsuz3at24...

CVE-2026-47319

creationtimestamp| type| source ---|---|--- 2026-06-04 10:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhjizpk72x...

CVE-2026-50213

creationtimestamp| type| source ---|---|--- 2026-06-04 10:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgxfu2cx22...

CVE-2026-50211

creationtimestamp| type| source ---|---|--- 2026-06-04 10:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgrli5m32d 2026-06-04 19:56:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116693597828292612...