Search Vulnerabilities

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

Interpretation Conflict in GitLab

Fastify's Content-Type header tab character allows body validation bypass

Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules

uv is vulnerable to ZIP payload obfuscation through parsing differentials

Git allows arbitrary code execution through broken config quoting

Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)

ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

CodeIgniter validation of header name and value

A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat De...

Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability

PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended

CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained

Bref Body Parsing Inconsistency in Event-Driven Functions

Bref Multiple Value Headers Not Supported in ApiGatewayFormatV2

Command substitution output can trigger shell expansion in fish shell

A interpretation conflict in Fortinet IPS Engine versions 7

Authentik lacks Proxy IP headers validation

TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contracts

Insecure header validation in slim/psr7