https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:43:55.855616+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2016-1000111 Withdrawn: BELL-CVE-2016-1000111 — CVE-2016-1000111 does not affect BellSoft software 2026-10-02T17:43:55.864995+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-alot-cve-2016-1000111 BREW-alot-CVE-2016-1000111 — Forced Browsing in Twisted 2026-10-02T17:43:55.865032+00:00

Affected: Homebrew: alot

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the `HTTP_PROXY` environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an `httpoxy` issue.

 https://cve.radiocsirt.org/vuln/cnvd-2016-05252 cnvd-2016-05252 2026-10-02T17:43:55.865066+00:00 cnvd-2016-05252 https://cve.radiocsirt.org/vuln/euvd-2026-88936 EUVD-2026-88936 2026-10-02T17:43:55.865081+00:00 EUVD-2026-88936 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1000111 fkie_cve-2016-1000111 2026-10-02T17:43:55.865092+00:00

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

 https://cve.radiocsirt.org/vuln/ghsa-3gqj-cmxr-p4x2 GHSA-3gqj-cmxr-p4x2 — Forced Browsing in Twisted 2026-10-02T17:43:55.865115+00:00

Affected: PyPI: Twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the `HTTP_PROXY` environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an `httpoxy` issue.

 https://cve.radiocsirt.org/vuln/gsd-2016-1000111 gsd-2016-1000111 2026-10-02T17:43:55.865137+00:00 gsd-2016-1000111 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10162-1 openSUSE-SU-2024:10162-1 — python3-Twisted-16.4.1-1.2 on GA media 2026-10-02T17:43:55.865148+00:00

python3-Twisted-16.4.1-1.2 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2020-214 PYSEC-2020-214 2026-10-02T17:43:55.865163+00:00

Affected: PyPI: twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

 https://cve.radiocsirt.org/vuln/rhsa-2018:0273 RHSA-2018:0273 — Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update 2026-10-02T17:43:55.865181+00:00

Twisted: sets environmental variable based on user supplied Proxy request header

 https://cve.radiocsirt.org/vuln/suse-su-2017:0114-1 SUSE-SU-2017:0114-1 — Security update for python-Twisted 2026-10-02T17:43:55.865196+00:00

Security update for python-Twisted

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1000111 UBUNTU-CVE-2016-1000111 2026-10-02T17:43:55.865208+00:00

Affected: Ubuntu:14.04:LTS: twisted, Ubuntu:16.04:LTS: twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2522 WID-SEC-W-2025-2522 — Mehrere Webserver: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T17:43:55.865227+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in mehreren Webserver Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.