Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:23:01 +0000 CVE-2025-4035 — Libsoup: cookie domain validation bypass via uppercase characters in libsoup https://cve.radiocsirt.org/vuln/cve-2025-4035 <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.</p> https://cve.radiocsirt.org/vuln/cve-2025-4035 RHSA-2025:8128 — Red Hat Security Advisory: libsoup3 security update https://cve.radiocsirt.org/vuln/rhsa-2025:8128 <p>libsoup: Cookie domain validation bypass via uppercase characters in libsoup libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup libsoup: Denial of Service attack to websocket server libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header</p> <p>libsoup: Cookie domain validation bypass via uppercase characters in libsoup libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup libsoup: Denial of Service attack to websocket server libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header</p> https://cve.radiocsirt.org/vuln/rhsa-2025:8128