Lucene search
+L

3429 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/15 3:12 a.m.•9 views

Malicious code in o1js-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9235ed25ae95d4286d7a3d5379bd815865a81ccbbf126851fcc04271ec639987 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/05/15 3:12 a.m.•4 views

Malware in o1js-wrapper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2025/05/13 5:18 p.m.•18 views

php: Header parser of http stream wrapper does not handle folded headers

A flaw was found in PHP. This vulnerability allows misinterpretation of HTTP response headers, potentially leading to incorrect usage of headers, MIME types, and other response attributes via incorrect parsing of folded headers in the HTTP request module...

6.3CVSS5.3AI score0.00585EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/05/13 5:18 p.m.•18 views

php: Streams HTTP wrapper does not fail for headers with invalid name and no colon

A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers...

6.3CVSS5.4AI score0.00502EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 5:18 p.m.•704 views

php: Stream HTTP wrapper header check might omit basic auth header

A flaw was found in PHP. This vulnerability allows certain headers to be either not sent or misinterpreted due to insufficient validation of the end-of-line characters via user-supplied headers...

7.3CVSS5.8AI score0.00554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 5:18 p.m.•17 views

php: Stream HTTP wrapper truncates redirect location to 1024 bytes

A flaw was found in PHP. This vulnerability allows incorrect URL truncation and redirection to the wrong location via HTTP redirect handling due to a limited location buffer size...

9.8CVSS6.2AI score0.00856EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 5:18 p.m.•25 views

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6AI score0.01482EPSS
SaveExploits3References7
RedHat Linux
RedHat Linux
•added 2025/05/13 2:00 p.m.•23 views

php: Header parser of http stream wrapper does not handle folded headers

A flaw was found in PHP. This vulnerability allows misinterpretation of HTTP response headers, potentially leading to incorrect usage of headers, MIME types, and other response attributes via incorrect parsing of folded headers in the HTTP request module...

6.3CVSS5.3AI score0.00585EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/05/13 2:00 p.m.•21 views

php: Streams HTTP wrapper does not fail for headers with invalid name and no colon

A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers...

6.3CVSS5.4AI score0.00502EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 2:00 p.m.•154 views

php: Stream HTTP wrapper header check might omit basic auth header

A flaw was found in PHP. This vulnerability allows certain headers to be either not sent or misinterpreted due to insufficient validation of the end-of-line characters via user-supplied headers...

7.3CVSS5.8AI score0.00554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 2:00 p.m.•18 views

php: Stream HTTP wrapper truncates redirect location to 1024 bytes

A flaw was found in PHP. This vulnerability allows incorrect URL truncation and redirection to the wrong location via HTTP redirect handling due to a limited location buffer size...

9.8CVSS6.2AI score0.00856EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•17 views

php: Header parser of http stream wrapper does not handle folded headers

A flaw was found in PHP. This vulnerability allows misinterpretation of HTTP response headers, potentially leading to incorrect usage of headers, MIME types, and other response attributes via incorrect parsing of folded headers in the HTTP request module...

6.3CVSS5.3AI score0.00585EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•19 views

php: Stream HTTP wrapper header check might omit basic auth header

A flaw was found in PHP. This vulnerability allows certain headers to be either not sent or misinterpreted due to insufficient validation of the end-of-line characters via user-supplied headers...

7.3CVSS5.8AI score0.00554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•178 views

php: Stream HTTP wrapper truncates redirect location to 1024 bytes

A flaw was found in PHP. This vulnerability allows incorrect URL truncation and redirection to the wrong location via HTTP redirect handling due to a limited location buffer size...

9.8CVSS6.2AI score0.00856EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•19 views

php: Streams HTTP wrapper does not fail for headers with invalid name and no colon

A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers...

6.3CVSS5.4AI score0.00502EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•56 views

php: Stream HTTP wrapper header check might omit basic auth header

A flaw was found in PHP. This vulnerability allows certain headers to be either not sent or misinterpreted due to insufficient validation of the end-of-line characters via user-supplied headers...

7.3CVSS5.8AI score0.00554EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 1:59 p.m.•25 views

php: Stream HTTP wrapper truncates redirect location to 1024 bytes

A flaw was found in PHP. This vulnerability allows incorrect URL truncation and redirection to the wrong location via HTTP redirect handling due to a limited location buffer size...

9.8CVSS6.2AI score0.00856EPSS
SaveExploits0References5
osv_alsa
osv_alsa
•added 2025/05/13 12:00 a.m.•24 views

ALSA-2025:7418 Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 php: Streams HTTP wrapper...

9.8CVSS6AI score0.01482EPSS
SaveExploits3References14
AlmaLinux
AlmaLinux
•added 2025/05/13 12:00 a.m.•25 views

Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 php: Streams HTTP wrapper...

9.8CVSS6AI score0.01482EPSS
SaveExploits3References14
AlmaLinux
AlmaLinux
•added 2025/05/13 12:00 a.m.•33 views

Moderate: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 php: Streams HTTP wrapper...

9.8CVSS6AI score0.00856EPSS
SaveExploits2References12
Rows per page
Query Builder