Archive
17 October 2025
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Critical 10.0
Squid vulnerable to information disclosure via authentication credential leakage in error handling
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…
-
Critical 9.8CVE-2025-56221 Public exploit
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a bru…
-
Critical 9.8CVE-2025-56218 Public exploit
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a …