Most Tinyproxy Instances are potentially vulnerable to flaw CVE-2023-49606

A critical Remote Code Execution vulnerability in the Tinyproxy service potentially impacted 50,000 Internet-Exposing hosts. Researchers from Cisco Talos reported a use-after-free vulnerability in the HTTP Connection Headers parsing of Tinyproxy 1.11.1 and Tinyproxy 1.10.0. The issue is tracked as CVE-2023-49606 and received a CVSS score of 9.8. The exploitation of the issue can potentially lead […]

breaking news cisco cisco talos code code execution critical cve cvss cvss score exploitation exposing flaw free hacking headers http information security news internet issue it information security parsing pierluigi paganini remote code remote code execution researchers score security service talos tinyproxy use-after-free vulnerability vulnerable