1152 matches found
OpenSSL 3.0.0 < 3.0.18 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.18 advisory. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy'...
VulnCheck KEV: CVE-2025-27915
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an...
PT-2025-39988
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.16 through 3.5.0 EDK II affected versions not specified Description An issue has been identified in OpenSSL where an application using the HTTP client API functions may trigger an out-of-bounds read if the no proxy...
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft's Direct Send feature to form a "highly efficient attack pipeline" in recent phishing campaigns, according to new findings from ReliaQuest. "Axios user agent activity surged 241% from June to August 2025, dwarfin...
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
...
Release Information for Veeam ONE 13 Patch 1
Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...
Linux Distros Unpatched Vulnerability : CVE-2020-15693
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part o...
Linux Distros Unpatched Vulnerability : CVE-2025-32911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to...
CVE-2025-9001
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
CVE-2025-9001
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
CVE-2025-9001 LemonOS HTTP Client main.cpp HTTPGet stack-based overflow
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to carry out a clickjacking attack.
The vulnerability in the IBM Datacap Navigator software, a document collection and processing tool, relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to carry out a clickjacking attack remotely...
PT-2025-33432 · Lemon S · Lemonos
Name of the Vulnerable Software and Affected Versions: LemonOS versions prior to nightly-2024-07-13 Description: A stack-based buffer overflow issue exists in the HTTP Client component of LemonOS. The HTTPGet function within the /Applications/Steal/main.cpp file is affected, specifically due to...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to carry out a clickjacking attack.
The vulnerability in the IBM Datacap Navigator software, a document collection and processing tool, relates to the user interface’s false representation of critical information. Exploiting this vulnerability could allow an attacker to carry out a clickjacking attack remotely...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the IBM Datacap Navigator web client software for document collection and processing lies in the absence of a “Secure” flag in the session cookies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6926 Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-16453 Malicious code in call-center-web-client (npm)
The package call-center-web-client was found to contain malicious code...