Spring Cloud Gateway HTTP Request Smuggling

The vulnerability of the library used to create Spring Cloud Gateway API gateways is related to deficiencies in generating HTTP requests. Exploiting this vulnerability allows a malicious actor to redirect the X-Forwarded-For and Forwarded headers from untrusted proxy servers...

Websoft HCM Automation Software Code Execution

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...