A security flaw called HTTP Request Smuggling has been found in the Erlang inets httpd module, a component that runs on some web servers. The problem happens because the module doesn't handle duplicate Content-Length headers in incoming website requests correctly: it uses the first header it sees to read request data, while common front-end ...
Continue reading
A security flaw, tracked as CVE-2026-8711, affects the NGINX JavaScript feature used in many web server setups. This issue only impacts configurations that use the js_fetch_proxy setting paired with visitor-controlled data (such as information from visitor browser headers, URL parameters, or cookies) and also call the ngx.fetch() function from ...
Continue reading
A security flaw has been found in versions 3.3.18 and 3.4.8 of MariaDB, a popular open-source database system that many websites use to store data like user account information, product listings, and site content. The vulnerability only triggers in specific circumstances: when a website takes unvetted user input (such as form entries or search ...
Continue reading
A security flaw has been identified in the popular WordPress plugin SAML Single Sign On (SSO Login), a tool that lets users log into WordPress sites using credentials from other services they already use. All versions of the plugin up to and including version 5.4.4 are affected by this vulnerability.The flaw stems from a coding error that causes ...
Continue reading
