parse-url 安全漏洞

parse-url is an advanced url parser with git url support by the individual developer Ionică Bizău. A security vulnerability exists in parse-url prior to version 8.1.0, which stems from the fact that parse-url incorrectly parses the https url that follows it, identifying its protocol as ssh, and...

DEBIAN-CVE-2018-3774

Incorrect parsing in url-parse 1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol...

Wrong Hostname Assumption

WordPress is vulnerable to the wrong hostname assumption. The wphttpvalidateurl function wrongly treats the URLs with the hostname= localhost as the same host by default...

SSL Certificate with Wrong Hostname

The 'commonName' CN attribute of the SSL certificate presented for this service is for a different machine. TRUSTED...