浏览报告
15,219 份报告 · 本页赏金 $0
WebSocket send queue use-after-free during nested curl_ws_send()内存破坏curl低危—2026-10-20SSH (SCP/SFTP) host-key verification is skipped on connection reuse — a pinned/known_hosts transfer silently reuses a previously-unverified connection密码学缺陷curl低危—2026-10-20CURLOPT_PROXYHEADER is not part of the HTTP-proxy connection reuse key: a second CONNECT-tunnel transfer silently reuses the first tunnel's Proxy-Auth身份认证curl低危—2026-10-20RTSP ANNOUNCE/SET_PARAMETER upload with --use-ascii / CURLOPT_TRANSFERTEXT sends more body bytes than the declared Content-Length (incomplete fix of e注入与走私curl低危—2026-10-19GnuTLS + Apple SecTrust discards authenticated OCSP failure密码学缺陷curl低危—2026-10-26WebSocket decoder use-after-free when curl_easy_pause() unpauses from a debug callback内存破坏curl低危—2026-10-19SCP upload with --crlf sends more bytes than the size declared to the server (same class curl refused for IMAP CVE-2026-87864 and RTSP)注入与走私curl低危—2026-10-19TLS session cache key omits native_ca_store: a session validated with CURLSSLOPT_NATIVE_CA can be resumed by a transfer that disabled it (incomplete f密码学缺陷curl低危—2026-10-20Redirect to imap/pop3/smtp (SASL) or sftp/scp (libssh) authenticates to the attacker's host with the user's ambient Kerberos credentials信息泄露curl低危—2026-10-21Cross-protocol redirect to imap:// or smtp:// uploads the -F/MIMEPOST form and the custom Authorization/Cookie headers to the redirect target信息泄露curl低危—2026-10-26OpenSSL+Apple SecTrust: SecTrust accepts certificates that the app's CURLOPT_SSL_CTX_FUNCTION trust store or verify callback rejected密码学缺陷curl低危—2026-10-26CVE-2026-111954: upload reader failed redirect UAF内存破坏curl低危—2026-10-26CVE-2026-11586 fix is incomplete: auto-PONG memory grows without limit through curl_ws_recv() (CONNECT_ONLY)拒绝服务curl低危—2026-10-21passive FTPS data connection handshake blocks curl_multi_perform() with no timeout (regression in 8.19.0)拒绝服务curl低危—2026-10-23CVE-2026-111953: GnuTLS SecTrust OCSP staple bypass密码学缺陷curl低危—2026-10-26CVE-2026-111952: OpenSSL provider use-after-free again内存破坏curl低危—2026-10-26wolfSSL TLS sessions retain native-CA trust after the application narrows trust密码学缺陷curl低危—2026-10-26CVE-2026-111950: TLS session cache diff scheme reuse业务逻辑curl低危—2026-10-26libcurl shared-HSTS-cache race leads to use-after-free with attacker-controlled function-pointer call内存破坏curl高危—2026-10-19CRLF injection in the HTTP request-line via `CURLOPT_REQUEST_TARGET` (`--request-target`)注入与走私curl中危—2026-10-18curl RTSP connection reuse routes response headers to the RTP callback (rtsp_conn state machine not reset between sessions)身份认证curl中危—2026-10-19CRLF injection in the RTSP request-line and Transport header via `CURLOPT_RTSP_STREAM_URI` and `CURLOPT_RTSP_TRANSPORT`注入与走私curl中危—2026-10-18OpenSSL provider OSSL_LIB_CTX used after free via the connection shutdown list (CVE-2026-80229 fix incomplete)内存破坏curl低危—2026-10-26CVE-2026-111484: OpenSSL with SecTrust accepts bad OCSP staples密码学缺陷curl低危—2026-10-26CVE-2026-111878: OpenSSL provider UAF on TLS shutdown内存破坏curl低危—2026-10-26