CVE-2026-55149

creationtimestamp| type| source ---|---|--- 2026-08-20 18:35:10+00:00| published-proof-of-concept| https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68...

GHSA-QQFF-5854-PX68 vouch-proxy has an Unbounded Multipart Cookie Allocation DoS

Unbounded Multipart Cookie Allocation DoS in vouch-proxy Summary vouch-proxy v0.47.2 contains an unauthenticated remote denial-of-service vulnerability in its multipart cookie reassembly logic. The /validate endpoint parses the total cookie part count directly from the attacker-controlled cookie...

PT-2026-80760

Name of the Vulnerable Software and Affected Versions vouch-proxy version 0.47.2 Description An unauthenticated remote denial-of-service issue exists in the multipart cookie reassembly logic. The /validate and / external-auth-:id endpoints parse the total cookie part count directly from the cooki...

EUVD-2014-6693

Malware in sbrugna...

Malicious code in test-mlw1-hakas-vouch (npm)

The package test-mlw1-hakas-vouch was found to contain malicious code...

MAL-2025-35479 Malicious code in test-mlw2-hakas-vouch (npm)

The package test-mlw2-hakas-vouch was found to contain malicious code...

MAL-2025-8701 Malicious code in @malware-test-hakas-vouch/test-mlw3-hakas-vouch (npm)

The package @malware-test-hakas-vouch/test-mlw3-hakas-vouch was found to contain malicious code...

Malicious code in test-mlw2-hakas-vouch (npm)

The package test-mlw2-hakas-vouch was found to contain malicious code...

Malicious code in @malware-test-hakas-vouch/test-mlw3-hakas-vouch (npm)

The package @malware-test-hakas-vouch/test-mlw3-hakas-vouch was found to contain malicious code...

MAL-2025-34792 Malicious code in test-mlw1-hakas-vouch (npm)

The package test-mlw1-hakas-vouch was found to contain malicious code...

CVE-2014-6815

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6815

CVE-2014-6815 affects the Android Vouch! app (com.voucherry.voucherry) version 2.1.6, where SSL certificate validation is not performed. The root cause is failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information ...

CVE-2014-6815

The Vouch! aka com.voucherry.voucherry application 2.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...