Search Vulnerabilities

Multipart form-data header injection in Req via unescaped name/filename/content_type

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

In libinput before 1

Etsy::StatsD versions through 1.002002 for Perl allow metric injections

Net::Statsd versions before 0.13 for Perl allow metric injections

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

CRLF injection in HTTP/1 request line via unvalidated method in Mint

cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections

eventsource-encoder: SSE event injection via unsanitized event and id fields

CRLF injection in WebSocket upgrade request in hackney

CR/LF injection in query parameter in hackney

CRLF injection in cookie domain/path options in hackney

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary...

Netty: CRLF Injection in Netty Redis Codec Encoder