13096 matches found
CVE-2025-61772 Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory witho...
Cross-site Scripting (XSS)
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper neutralisation of input during web page generation. An attacker can execute arbitrary...
CVE-2025-61771 Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or...
EUVD-2020-0209
Malware in sbrugna...
EUVD-2020-7262
Malware in sbrugna...
EUVD-2020-7254
Malware in sbrugna...
EUVD-2021-1459
Malware in sbrugna...
EUVD-2021-25594
Malware in sbrugna...
EUVD-2021-1574
Malware in sbrugna...
EUVD-2021-19531
Malware in sbrugna...
EUVD-2021-2493
Malware in sbrugna...
EUVD-2020-3425
Malware in sbrugna...
EUVD-2021-0555
Malware in sbrugna...
EUVD-2021-1492
Malware in sbrugna...
EUVD-2021-2457
Malware in sbrugna...
EUVD-2021-0624
Malware in sbrugna...
EUVD-2021-0581
Malware in sbrugna...
EUVD-2021-0971
Malware in sbrugna...