CVE-2017-9096

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-02 01:00:12+00:00| seen| Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY5ATwXxwRV07Zq46AA 2026-09-03 00:00:54+00:00| published-proof-of-concept|...

EUVD-2020-9096

Malware in sbrugna...

aella-gateway-admin (>=1.0.5, <=1.0.9), angus-router (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-9096 via express-gateway (1.16.11)

express-gateway NPM version 1.16.11 is affected by a known vulnerability. The following packages have a transitive dependency on express-gateway and may be impacted: - aella-gateway-admin =1.0.5, =0.1.0, =1.0.0, =0.0.1, =0.0.5, =0.0.6 - factoria.rae.identity 1.0.0 - wawole-gateway 1.0.0 Source...

CVE-2024-9096

In lunary-ai/lunary version 1.4.28, the /checklists/:id route allows low-privilege users to modify checklists by sending a PATCH request. The route lacks proper access control, such as middleware to ensure that only authorized users e.g., project owners or admins can modify checklist data. This...

CVE-2024-9096 Improper Authorization in lunary-ai/lunary

In lunary-ai/lunary version 1.4.28, the /checklists/:id route allows low-privilege users to modify checklists by sending a PATCH request. The route lacks proper access control, such as middleware to ensure that only authorized users e.g., project owners or admins can modify checklist data. This...

Linux Distros Unpatched Vulnerability : CVE-2015-9096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences...

Security Bulletin: IBM Daeja ViewONE Virtual 5.0.14 iFix 5 addresses CVE-2017-9096

Summary IBM Daeja ViewONE Virtual 5.0.14 iFix 5 released on October 3, 2024 addresses the vulnerable library iText reported under CVE-2017-9096 by removing it. Vulnerability Details CVEID:CVE-2017-9096 DESCRIPTION: iText PDF Library could allow a remote authenticated attacker to obtain sensitive...

Moxa MB3xxx Series Protocol Gateways Weak Password Requirements (CVE-2019-9096)

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing accoun...

SUSE CVE-2015-9096

Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring...

aero.m-click:mcpdf (>=0.2.0, <=0.2.4), at.iem:sysson_2.10 (1.12.0) +506 more potentially affected by CVE-2017-9096 via com.itextpdf:itextpdf (>=5.0.6, <=5.5.11)

com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.10.2, =1.13.0, =1.1.8, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =2.23.0, =2.23.5, =20.2.0 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...

aero.m-click:mcpdf (>=0.2.0, <=0.2.4), at.iem:sysson_2.10 (1.12.0) +506 more potentially affected by CVE-2017-9096 via com.itextpdf:itextpdf (>=5.0.6, <=5.5.11)

com.itextpdf:itextpdf MAVEN version =5.0.6, =0.2.0, =1.10.2, =1.13.0, =1.1.8, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =2.23.0, =2.23.5, =20.2.0 and more Source cves: CVE-2017-9096 Source advisory: GHSA-86P9-X5PW-94QX...

com.nerderg.ajaxanywhere:ajaxanywhere-testapp (>=2.0, <=2.1.1), displaytag:displaytag (>=1.1.1, <=1.2) +18 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.3)

com.lowagie:itext MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.nerderg.ajaxanywhere:ajaxanywhere-testapp =2.0, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =2.3.0, =2.1.0-m1, =2.1.0-m1, =2.1.0-m1,...

com.github.nruzic.org.apache.maven.doxia:doxia-doc-renderer (>=1.8.1-interpolation-hotfix-rc4, <=1.8.1.1), com.github.spyhunter99:findbugs-report-plugin (>=1.0.0, <=1.0.2) +11 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.4)

com.lowagie:itext MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.github.nruzic.org.apache.maven.doxia:doxia-doc-renderer =1.8.1-interpolation-hotfix-rc4, =1.0.0, =1.0.2, =1.5.0.1,...

it.micegroup.displaytag:displaytag (>=2.0, <=2.1), it.micegroup:displaytag (2.2) +29 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.4.8)

com.lowagie:itext MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - it.micegroup.displaytag:displaytag =2.0, =0.9.4, =0.9.4, =0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.2...

net.sf.datavision:datavision (1.1.0) potentially affected by CVE-2017-9096 via com.lowagie:itext (2.0.1)

com.lowagie:itext MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - net.sf.datavision:datavision 1.1.0 Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...

com.gitee.huanminabc:file-tool (>=1.0.0-release, <=1.0.3-release), com.gitee.huanminabc:utils-server (>=1.0.0-release, <=1.0.3-release) +99 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.0.8)

com.lowagie:itext MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.gitee.huanminabc:file-tool =1.0.0-release, =1.0.0-release, =1.0.0-release, =6.0, =2.5, =1.1.14, =1.1.14, =4.2.0, =1.1.14,...

io.github.martinhickson:jboss-seam-pdf-jakarta (>=2.4.1-bravura-36, <=2.4.1-bravura-38), org.chtijbug.drools:drools-framework-rest-guvnor (>=drools-framework-parent-1.5.3, <=1.5.2) +17 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.2)

com.lowagie:itext MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - io.github.martinhickson:jboss-seam-pdf-jakarta =2.4.1-bravura-36, =drools-framework-parent-1.5.3,...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1, <=1.2.2), es.klicap.sonar:pdf-report (1.1) +7 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.4)

com.lowagie:itext MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =0.1, =1.0.30.1.0, =1.2, =1.3.1, =0.1, =1.0-beta3, =1.0-beta4 Sourc...

ai.libs:jaicore-ea (>=0.1.0, <=0.2.7), com.d3xsystems:d3x-morpheus-viz (>=1.0.22, <=1.0.31) +406 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.5)

com.lowagie:itext MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - ai.libs:jaicore-ea =0.1.0, =1.0.22, =1.0.2, =0.2.0, =adempiere-3.9.4-abp-1.0.3, =1.0.0, =1.0.0, =shw-1.0.0, =1.0.0, =1.0.0,...

africa.absa:inception-reporting (>=1.0.0, <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0, <=1.2.0) +284 more potentially affected by CVE-2017-9096 via com.lowagie:itext (>=4.2.0, <=4.2.2)

com.lowagie:itext MAVEN version =4.2.0, =1.0.0, =1.0.0, =2.0.7, =1.0.0, =1.0.7, =2.1.0, =2.1.0, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =v1.0.26, =1.0.58 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...