curl

A newly disclosed flaw, tracked as CVE-2026-3783, allows an OAuth2 bearer token to be unintentionally forwarded across HTTP(S) redirects when cURL or libcurl is instructed to use credentials from a user .netrc file — potentially exposing sensitive access tokens to attacker-controlled hosts. The...

When a single character — the humble tilde (~) — is handled incorrectly, the result can be more than just a parsing glitch: it can be a pathway out of intended restrictions and into other users’ files. CVE‑2023‑27534 is exactly that kind of bug: a path‑traversal flaw in curl’s SFTP path handling...

The curl/libcurl vulnerability tracked as CVE-2024-2466 is a practical reminder that a vendor attestation — “Azure Linux includes this open‑source library and is therefore potentially affected” — is an important, but scoped, inventory statement, not a categorical guarantee that other Microsoft...

The curl project’s advisory for CVE-2024-2398 describes a straightforward but consequential bug: when an application enables HTTP/2 server push, libcurl can leak previously allocated header memory if a pushed stream exceeds the library’s header limit and is aborted — a leak that can amount to...

curl’s SFTP support shipped with a wolfSSH backend that never performed host‑key verification, creating CVE‑2025‑10966 — a subtle but meaningful libcurl vulnerability that was fixed by removing the wolfSSH backend in curl 8.17.0 and replacing it with safer defaults. Background The libcurl...

The Wplace “500 Internal Server Error” is an HTTP server error that prevents the canvas from loading and blocks actions like placing pixels or signing in; while it usually means something failed on Wplace’s servers, a short, methodical troubleshooting run on the client side will tell you whether...

Hi, I mostly use another OS, and need to rewrite following script into one which works in windows. OK, here's the command: curl -s -x 127.0.0.1:8888 -b ./cookies.txt -X GET Link Removed 2>&1 | tr -d '[]' | sed "s/,/\n/g" | head -n 1 | sed "s/.\(.*\)./\1/" here's what it does: loads content of...