https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:44:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10911 bdu:2025-10911 https://cve.radiocsirt.org/vuln/bdu:2025-10911 https://cve.radiocsirt.org/vuln/brew-serveit-cve-2025-6442 <p><strong>Affected:</strong> Homebrew: serveit</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> <p><strong>Affected:</strong> Homebrew: serveit</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> https://cve.radiocsirt.org/vuln/brew-serveit-cve-2025-6442 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0760 certfr-2025-avi-0760 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0760 https://cve.radiocsirt.org/vuln/euvd-2026-245878 EUVD-2026-245878 https://cve.radiocsirt.org/vuln/euvd-2026-245878 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6442 <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6442 https://cve.radiocsirt.org/vuln/ghsa-r995-q44h-hr64 <p><strong>Affected:</strong> RubyGems: webrick</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> <p><strong>Affected:</strong> RubyGems: webrick</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.</p> <p>The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> https://cve.radiocsirt.org/vuln/ghsa-r995-q44h-hr64 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6442 msrc_CVE-2025-6442 https://cve.radiocsirt.org/vuln/msrc_cve-2025-6442 https://cve.radiocsirt.org/vuln/oesa-2025-1930 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ruby</p> <p>Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl). Security Fix(es):</p> <p>Webrick is an open source HTTP server toolkit for The Ruby Programming Language. Webrick has an environmental problem vulnerability, which originates from the inconsistent parsing of HTTP header terminators by the read_headers method, which may lead to an HTTP request entrainment attack.(CVE-2025-6442)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ruby</p> <p>Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl). Security Fix(es):</p> <p>Webrick is an open source HTTP server toolkit for The Ruby Programming Language. Webrick has an environmental problem vulnerability, which originates from the inconsistent parsing of HTTP header terminators by the read_headers method, which may lead to an HTTP request entrainment attack.(CVE-2025-6442)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1930 https://cve.radiocsirt.org/vuln/suse-su-2025:02739-1 <p>Security update for ruby2.5</p> <p>Security update for ruby2.5</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02739-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6442 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: jruby, Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:Pro:18.04:LTS: ruby2.5, Ubuntu:18.04:LTS: jruby, Ubuntu:Pro:20.04:LTS: ruby2.7, Ubuntu:20.04:LTS: jruby, Ubuntu:22.04:LTS: ruby-webrick, Ubuntu:24.04:LTS: ruby-webrick, Ubuntu:25.10: ruby-webrick and 1 more</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:16.04:LTS: jruby, Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:Pro:18.04:LTS: ruby2.5, Ubuntu:18.04:LTS: jruby, Ubuntu:Pro:20.04:LTS: ruby2.7, Ubuntu:20.04:LTS: jruby, Ubuntu:22.04:LTS: ruby-webrick, Ubuntu:24.04:LTS: ruby-webrick, Ubuntu:25.10: ruby-webrick and 1 more</p> <p>Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6442 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2475 <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Dateien zu manipulieren, und um seine Privilegien zu erhöhen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Dateien zu manipulieren, und um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2475