libcurl: Secure=1 cookie flag bypasses the 8.22.0 fix and leaks over HTTP
By nonetype_ to curl | Informative | Low | $0
Use-after-free read of the freed referer buffer in `curl_easy_setopt(CURLOPT_REFERER)` — stale heap bytes transmitted in an outbound `Referer:` heade
By nextarjunaxfer to curl | Not-applicable | High | $0
HTML Injection in Contact Form Email Enables Phishing via Legitimate ████████ Infrastructure
By tenzai to Essity | Resolved | Medium | $0
Rustls backend discloses out-of-bounds heap data during legal IMAP upload cancellation
By stze to curl | Not-applicable | Medium | $0
IMAP literal size truncation on 32-bit platforms corrupts downloads and desynchronizes the response parser
By cyberfathy to curl | Informative | High | $0
Client-Side Denial of Service (DoS) via Memory Exhaustion on Password Reset Endpoint
By letx_world to Khan Academy | Resolved | High | $0
libmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codec
By fg0x0 to MariaDB | Resolved | Medium | $0
One-click cross-account JavaScript execution steals a victim write token through Turbo pagination and unattached Active Storage HTML
By pirikara to Basecamp | Resolved | High | $0
IDOR allows user to access report details via reference.json endpoint
By sm41ldrag0n79_mbbank to HackerOne | Resolved | Critical | $15000
SSRF via User-Controlled Push proxyServer in Notifications Push Registration
By yoyomiski to Nextcloud | Resolved | Medium | $0
Connector/C Out-of-bounds read in `unpack_fields()` from short metadata field
By mschorm to MariaDB | Resolved | No Rating | $0
Connector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacket
By fg0x0 to MariaDB | Resolved | Medium | $0
Unauthenticated disclosure of draft/private/pending post titles & IDs via Secure Custom Fields nopriv AJAX field-query handlers (post_object/relations
By jakubk to WordPress | Resolved | Medium | $0
[HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped Filenames
By mrtomato to curl | Informative | High | $0
Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing
By m4nray to curl | Not-applicable | Medium | $0
Windows filename sanitizer misses Unicode COM/LPT reserved device names
By giant_anteater to curl | Informative | None | $0
HackerOne Code sends live password-reset tokens to Segment in automatic page events
By 1rhino2 to HackerOne | Resolved | Low | $200
PIN bypass in PassCodeActivity via back button
By alper_ozturk to Nextcloud | Resolved | Medium | $150
Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope
By njh215 to Nextcloud | Resolved | Medium | $250
Improper input validation in emoji field leads to sidebar UI denial of service
By yoyomiski to Nextcloud | Resolved | Low | $0
HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled
By thatcyberguyrich to curl | Informative | Medium | $0
Use-after-free of the internal multi->admin easy handle via the documented CURLMOPT_NOTIFYFUNCTION callback
By fengxiao to curl | Informative | Medium | $0
TELNET control and environment data bypass HTTPS-proxy TLS
By giant_anteater to curl | Informative | No Rating | $0
files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner, survives share revocation and account delet
By rz1027 to Nextcloud | Resolved | Medium | $0
Persistent SMTP header injection via identity `organization` / `name`
By dogeshark to Nextcloud | Resolved | None | $0
Socket API drops expired timeouts for transfers queued behind a connection limit
By giant_anteater to curl | Informative | No Rating | $0
Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId)
By msatz to Nextcloud | Resolved | Medium | $150
Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████
By agusnicco to Essity | Resolved | Critical | $0