curl: Disk Space Exhaustion leading to a Denial of Service (DoS)
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
WakaTime: Unauthorized Disclosure of Private Emails via WakaTime Private Leaderboards
The vulnerability allowed unauthorized disclosure of private email addresses of WakaTime users through the private leaderboards feature. The email addresses were exposed to leaderboard creators and me ...
Continue ReadingAugust 12, 2025
curl: OS Command Injection in scripts/firefox-db2pem.sh via untrusted certificate nicknames
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
curl: Stack use-after-scope in HTTP/3 POST request processing via CURLOPT_POSTFIELDS
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
Node.js: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
curl: arbitrary file read via `file://` path traversal with `–path-as-is`
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
curl: Use After Free (that leads to arbitrary Write for some versions)
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
curl: curl ASSERTs when accessing an LDAP URL
Vulnerability description not...Read More ...
Continue ReadingAugust 12, 2025
Back to Main