CVE-2025-27820 – Apache HttpClient Domain Check Bypass Vulnerability

April 24, 2025

CVE ID : CVE-2025-27820

Published : April 24, 2025, 12:15 p.m. | 2 hours, 44 minutes ago

Description : A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46420 – Libsoup Memory Leak Vulnerability

Next Article Redis DoS Vulnerability: Attackers Can Exhaust Server Memory or Cause Crashes

Highlights

CVE-2025-49580 – XWiki Cross-Site Scripting (XSS) Vulnerability

June 13, 2025

CVE ID : CVE-2025-49580

Published : June 13, 2025, 4:15 p.m. | 1 hour, 51 minutes ago

Description : XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never been executed. This vulnerability is fixed in 17.1.0-rc-1, 16.10.4, and 16.4.7.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Designing Better UX For Left-Handed People

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

Trump’s AI plan says a lot about open source – but here’s what it leaves out

Google’s new Search mode puts classic results back on top – how to access it

These AR swim goggles I tested have all the relevant metrics (and no subscription)

Google’s new AI tool Opal turns prompts into apps, no coding required

Laravel Scoped Route Binding for Nested Resource Management

Laravel Scoped Route Binding for Nested Resource Management

Add Reactions Functionality to Your App With Laravel Reactions

saasykit/laravel-open-graphy

Sam Altman won’t trust ChatGPT with his “medical fate” unless a doctor is involved — “Maybe I’m a dinosaur here”

Sam Altman won’t trust ChatGPT with his “medical fate” unless a doctor is involved — “Maybe I’m a dinosaur here”

“It deleted our production database without permission”: Bill Gates called it — coding is too complex to replace software engineers with AI

Top 6 new features and changes coming to Windows 11 in August 2025 — from AI agents to redesigned BSOD screens

CVE-2025-27820 – Apache HttpClient Domain Check Bypass Vulnerability

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

ToolShell: An all-you-can-eat buffet for threat actors

Banana Pi BPI-F3 Single Board Computer Running Linux: Introduction

Notes Android App Using SQLite

AI Is Flipping UX Upside Down

Experiment with Gemini 2.0 Flash native image generation

CVE-2025-49580 – XWiki Cross-Site Scripting (XSS) Vulnerability

New Linux Security Flaw Can Bypass Disk Encryption

Sophos Unmasks Sakura RAT: Hackers Hacking Hackers with Backdoored Malware!

I never pay full price for PCs or Macs, thanks to these 7 money-saving tricks

CVE-2025-27820 – Apache HttpClient Domain Check Bypass Vulnerability

Related Posts