← 返回地图破甲

浏览报告

仅含 CVE

312 份报告 · 本页赏金 $0 · 2026 年 · 仅含 CVE · 清除筛选

CVE-2026-115529: Schannel TLS auto client session resumption身份认证curl低危—2026-10-26 A server response that answers nothing is used as the next transfer's reply — and with IMAP, a fully compliant server does this by accident其他弱点curl低危—2026-10-22 IDN decoding inserts authority delimiters and can redirect proxy CONNECT to a different host服务端请求伪造curl中危—2026-10-21 HSTS cache file: three trailing dots silently disable HSTS for that host密码学缺陷curl低危—2026-10-20 TLS session cache ignores CURLOPT_SSL_CTX_FUNCTION identity and resumes one client's session for another密码学缺陷curl低危—2026-10-20 CVE-2026-115528: wolfSSL TLS connect without cert密码学缺陷curl低危—2026-10-26 SSH host-key policy is missing from the connection-reuse tuple: strict pins and knownhosts are silently skipped on reused SFTP/SCP connections身份认证curl低危—2026-10-19 OpenSSL `--cert-status` accepts indefinitely stale GOOD OCSP staples密码学缺陷curl低危—2026-10-26 curl EXPIRE_SHUTDOWN timer never armed for silent servers: connection-shutdown timeout bypass in cshutdn (event-driven mode)拒绝服务curl低危—2026-10-23 CVE-2026-111951: curl -OJ truncate without filename路径遍历curl低危—2026-10-26 SSH (SCP/SFTP) host-key verification is skipped on connection reuse — a pinned/known_hosts transfer silently reuses a previously-unverified connection密码学缺陷curl低危—2026-10-20 CURLOPT_PROXYHEADER is not part of the HTTP-proxy connection reuse key: a second CONNECT-tunnel transfer silently reuses the first tunnel's Proxy-Auth身份认证curl低危—2026-10-20 RTSP ANNOUNCE/SET_PARAMETER upload with --use-ascii / CURLOPT_TRANSFERTEXT sends more body bytes than the declared Content-Length (incomplete fix of e注入与走私curl低危—2026-10-19 GnuTLS + Apple SecTrust discards authenticated OCSP failure密码学缺陷curl低危—2026-10-26 SCP upload with --crlf sends more bytes than the size declared to the server (same class curl refused for IMAP CVE-2026-87864 and RTSP)注入与走私curl低危—2026-10-19 TLS session cache key omits native_ca_store: a session validated with CURLSSLOPT_NATIVE_CA can be resumed by a transfer that disabled it (incomplete f密码学缺陷curl低危—2026-10-20 Redirect to imap/pop3/smtp (SASL) or sftp/scp (libssh) authenticates to the attacker's host with the user's ambient Kerberos credentials信息泄露curl低危—2026-10-21 Cross-protocol redirect to imap:// or smtp:// uploads the -F/MIMEPOST form and the custom Authorization/Cookie headers to the redirect target信息泄露curl低危—2026-10-26 OpenSSL+Apple SecTrust: SecTrust accepts certificates that the app's CURLOPT_SSL_CTX_FUNCTION trust store or verify callback rejected密码学缺陷curl低危—2026-10-26 CVE-2026-111954: upload reader failed redirect UAF内存破坏curl低危—2026-10-26 CVE-2026-11586 fix is incomplete: auto-PONG memory grows without limit through curl_ws_recv() (CONNECT_ONLY)拒绝服务curl低危—2026-10-21 CVE-2026-111953: GnuTLS SecTrust OCSP staple bypass密码学缺陷curl低危—2026-10-26 CVE-2026-111952: OpenSSL provider use-after-free again内存破坏curl低危—2026-10-26 CVE-2026-111950: TLS session cache diff scheme reuse业务逻辑curl低危—2026-10-26 OpenSSL provider OSSL_LIB_CTX used after free via the connection shutdown list (CVE-2026-80229 fix incomplete)内存破坏curl低危—2026-10-26