https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:02:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-364335 EUVD-2026-364335 https://cve.radiocsirt.org/vuln/euvd-2026-364335 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54199 <p>Tobit Laboratories AG TeamDavid&#39;s Webbox is vulnerable to HTTP header injection through the request body in the application&#39;s link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to the redirect link, resulting in the ability to control the response headers. This issue affects TeamDavid before Rollout 528.</p> <p>Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.</p> <p>Tobit Laboratories AG TeamDavid&#39;s Webbox is vulnerable to HTTP header injection through the request body in the application&#39;s link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to the redirect link, resulting in the ability to control the response headers. This issue affects TeamDavid before Rollout 528.</p> <p>Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54199 https://cve.radiocsirt.org/vuln/ghsa-pfmg-m2fv-v732 <p>Tobit Laboratories AG TeamDavid&#39;s Webbox is vulnerable to HTTP header injection through the request body in the application&#39;s link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to the redirect link, resulting in the ability to control the response headers. This issue affects TeamDavid through Rollout 524.</p> <p>Tobit Laboratories AG TeamDavid&#39;s Webbox is vulnerable to HTTP header injection through the request body in the application&#39;s link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to the redirect link, resulting in the ability to control the response headers. This issue affects TeamDavid through Rollout 524.</p> https://cve.radiocsirt.org/vuln/ghsa-pfmg-m2fv-v732