https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:14:47.794047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-136847 EUVD-2026-136847 2026-10-09T18:14:47.797514+00:00 EUVD-2026-136847 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5034 fkie_cve-2007-5034 2026-10-09T18:14:47.797549+00:00

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.

 https://cve.radiocsirt.org/vuln/ghsa-ff3h-vr24-34v2 GHSA-ff3h-vr24-34v2 2026-10-09T18:14:47.797582+00:00

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.

 https://cve.radiocsirt.org/vuln/gsd-2007-5034 gsd-2007-5034 2026-10-09T18:14:47.797601+00:00 gsd-2007-5034 https://cve.radiocsirt.org/vuln/rhsa-2007:0933 RHSA-2007:0933 — Red Hat Security Advisory: elinks security update 2026-10-09T18:14:47.797613+00:00

elinks reveals POST data to HTTPS proxy