Rails, Spring and Jetty trust Forwarded headers proxies often ignore
If a proxy only rewrites X-Forwarded-* headers, a client-supplied Forwarded value can override client IP, host and scheme.
3
Stories per day · 30 days
1 RSS
Relateddenial-of-service2ubuntu2advisory1apache1apache-cocoon1bind1cve-2025-407781cve-2025-86771dns1forwarded-header1information-disclosure1ip-spoofing1rails1request-smuggling1spring1squid1x-forwarded-for1
15 stories, newest first · one card per story
Stories tagged #cache-poisoning
Apache Cocoon cache can leak one user's data to another (CVE-2026-108088)
On multi-user apps, cached values for one user can be served to others, and no fix is planned.
Ubuntu Squid flaws allow request smuggling and cache crashes
CVE-2026-61642 can smuggle requests or poison caches; a separate digest bug crashes older Ubuntu releases.
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
Searchlight Cyber showed a patched Discourse upload chain letting basic users read server files via ImageMagick.
5
Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains
Google's PageBreak agent verified over 500 XSS flaws, including exploit chains, in its own web applications.
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
Weekly ThreatsDay digest: OFAC sanctions Tren de Aragua ATM jackpotting network, blockchain malware dead drops surge, plus cache-poisoning and EDR-evasion research.
3
New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches
YesWeHack researcher details cache key injection against Nginx, enabling access control bypass, cache poisoning, denial of service, and potential stored XSS.
1
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
RFC 10008 standardizes the HTTP QUERY method, creating potential WAF inspection bypasses, cache poisoning, and CSRF gaps because most defenses don't recognize the new verb.
1
BIND DNS Servers Hit by 14 Security Flaws Enabling Cache Poisoning and Remote Crashes
ISC patched 14 high-severity BIND 9 flaws enabling DNS cache poisoning, DNSSEC bypass, and remote crashes of exposed recursive resolvers.
2
ISC Patches 14 Vulnerabilities in BIND 9 Security Update
ISC patched 14 BIND 9 vulnerabilities, seven high-severity, all enabling denial-of-service conditions, with no exploitation observed so far.
2
BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks
ISC released BIND 9.20.29 patching 14 flaws, including two DNSSEC validation bypasses enabling cache poisoning and multiple denial-of-service bugs.
7
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.
6
USN-8742-1: Netty vulnerability
Ubuntu issues USN-8742-1 fixing a Netty DNS cache poisoning flaw caused by improper NS record bailiwick validation.
Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root
Six dnsmasq flaws enable DNS cache poisoning, DoS, memory leaks, and local root code execution; fixes ship in version 2.92rel2.
2