Flowise 安全漏洞

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.0.13 contained security vulnerabilities. These vulnerabilities stemmed from using an HTTP client that allowed arbitrary x-request-from headers, which could enable...

cpython: Excessive read buffering DoS in http.client

A flaw was found in the http.client module in the Python standard library. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This issue allows a malicious server to cause the client to read large amounts of data into...

python: CRLF injection via HTTP request method in httplib/http.client

A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat fr...

Zoom web client flaw could’ve let hackers crack meetings passcode

By Deeba Ahmed The vulnerability, if exploited, would have affected millions of Zoom users worldwide. This is a post from HackRead.com Read the original post: Zoom web client flaw could've let hackers crack meetings passcode...

Vulnerability of the HTTP client function in Cisco IOS and Cisco IOS XE operating systems, allowing attackers to read or modify arbitrary data

The vulnerability of the HTTP client function in Cisco IOS and Cisco IOS XE operating systems lies in the fact that information about the TCP port is not considered when comparing new requests with existing persistent HTTP connections. Exploiting this vulnerability allows a remote attacker to rea...

CVE-2019-12665

A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been sent via an encrypted channel. The vulnerability is due to TCP port information not being considered when matching new...