https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:39:46 +0000 https://vulnerability.circl.lu/vuln/cve-2018-5702 <p>Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.</p> <p>Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.</p> https://vulnerability.circl.lu/vuln/cve-2018-5702 https://vulnerability.circl.lu/vuln/usn-3533-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: transmission, Ubuntu:16.04:LTS: transmission</p> <p>It was discovered that Transmission incorrectly handled certain POST requests to the RPC server and allowed DNS rebinding attack. An attacker could possibly use this issue to execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: transmission, Ubuntu:16.04:LTS: transmission</p> <p>It was discovered that Transmission incorrectly handled certain POST requests to the RPC server and allowed DNS rebinding attack. An attacker could possibly use this issue to execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-3533-1