Lucene search
+L

23345 matches found

Redos
Redos
added 2026/05/05 12:0 a.m.11 views

ROS-20260505-73-0043

Vulnerability in python3.12 related to failure to take measures to neutralize crlf sequences. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

5.7CVSS6.2AI score0.0055EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.10 views

ROS-20260505-73-0052

A vulnerability in the http.cookies.Morsel component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the availability of protected information...

6CVSS7.3AI score0.00401EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2026/05/05 12:0 a.m.87 views

📄 BusyBox 1.37.0 Path Traversal

BusyBox version 1.37.0 suffers from a path traversal vulnerability. Exploit Title: BusyBox 1.37.0 - Path Traversal Google Dork: N/A Date: 2026-02-11 Exploit Author: Calil Khalil Vendor Homepage: https://busybox.net Software Link: https://busybox.net/downloads/ Version: BusyBox 1.36.1, 1.37.0 Test...

7CVSS5.8AI score0.00682EPSS
SaveExploits2
Redos
Redos
added 2026/05/05 12:0 a.m.14 views

ROS-20260505-73-0053

A vulnerability in the http.cookies.Morsel component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

6CVSS7.3AI score0.00401EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.19 views

PT-2026-38895

Summary Submodule name validation bypass plus missing validation in production code paths allows path traversal via crafted .gitmodules. Combined with a trust inheritance flaw in Submodule::open, this enables reading arbitrary git repository configs including credentials from traversed paths with...

7.5CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.22 views

PT-2026-36949

The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the fsReference AJAX route. This is due to the findSourceFile method normalizing user-supplied ref paths containing ../ directory traversal sequences without validating that the...

4.9CVSS5.9AI score0.0064EPSS
SaveExploits0References8
Redos
Redos
added 2026/05/05 12:0 a.m.14 views

ROS-20260505-73-0061

A vulnerability in the email module of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to compromise the integrity of protected information...

6CVSS7.2AI score0.0056EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-43870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of CRLF Sequences in HTTP Headers...

7.3CVSS5.3AI score0.00394EPSS
SaveExploits0References4
Redos
Redos
added 2026/05/05 12:0 a.m.13 views

ROS-20260505-73-0064

A vulnerability in the email module of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to compromise the integrity of protected information...

6CVSS7.2AI score0.0056EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.11 views

ROS-20260505-73-0045

A vulnerability in the urllib.request.DataHandler component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the integrity of protected information...

6CVSS7.3AI score0.0048EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.10 views

ROS-20260505-73-0042

Vulnerability in python3.11 related to failure to take measures to neutralize crlf sequences. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

5.7CVSS6.2AI score0.0055EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.11 views

ROS-20260505-73-0054

A vulnerability in the http.cookies.Morsel component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

6CVSS7.3AI score0.00401EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.10 views

ROS-20260505-73-0051

A vulnerability in the http.cookies.Morsel component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the availability of protected information...

6CVSS7.3AI score0.00401EPSS
SaveExploits0
Redos
Redos
added 2026/05/05 12:0 a.m.10 views

ROS-20260505-73-0063

A vulnerability in the email module of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to compromise the integrity of protected information...

6CVSS7.2AI score0.0056EPSS
SaveExploits0
Snyk
Snyk
added 2026/05/04 10:4 p.m.13 views

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the handling of raw string arguments in commands such as uidsearch, search, uidfetch, fetch, uidstore, store, and setquota. A user can execute arbitrary IMAP commands by injecting specially crafted input containing CR...

9.8CVSS6AI score0.00429EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/04 10:4 p.m.42 views

GHSA-HM49-WCQC-G2XG net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

5.8CVSS5.6AI score0.00429EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2026/05/04 10:4 p.m.14 views

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

9.8CVSS5.6AI score0.00429EPSS
SaveExploits0References12Affected Software1
Snyk
Snyk
added 2026/05/04 10:4 p.m.17 views

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via unvalidated flag arguments in IMAP commands. A user can execute arbitrary IMAP commands by injecting CRLF sequences through crafted Symbol inputs. Remediation Upgrade net-imap to version 0.4.24, 0.5.14, 0.6.4 or highe...

7.1CVSS6AI score0.00783EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/04 9:28 p.m.15 views

Directory Traversal

Overview org.webjars.npm:fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Directory Traversal via the normalize or equal functions. An attacker can bypass path-based access controls by submitting specially crafted percent-encoded or dot segmen...

8.7CVSS6.3AI score0.00521EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/04 9:28 p.m.42 views

Directory Traversal

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Directory Traversal via the normalize or equal functions. An attacker can bypass path-based access controls by submitting specially crafted percent-encoded or dot segments in URLs,...

8.7CVSS6.3AI score0.00521EPSS
SaveExploits0References2
Rows per page
Query Builder