PT-2025-47360

Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 7.0 through 7.2 Fortinet FortiMail versions 7.4.0 through 7.4.5 Fortinet FortiMail versions 7.6.0 through 7.6.3 Description A flaw exists in Fortinet FortiMail that allows for the injection of headers in responses...

Siemens SIMATIC S7-1500 Improper Neutralization of CRLF Sequences (CVE-2019-9947)

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the path component of a URL that...

curl: SMTP CRLF Injection in curl/libcurl via MAIL FROM/RCPT TO parameters

SMTP CRLF Injection Vulnerability in curl/libcurl Vulnerability ID: CURL-SMTP-CRLF-2024 CWE-93: Improper Neutralization of CRLF Sequences Executive Summary curl/libcurl contains a CRLF injection vulnerability in its SMTP implementation that allows attackers to inject arbitrary SMTP commands by...

curl: SMTP Command Injection Vulnerability in libcurl 8.16.0 via RFC 3461 Suffix

Executive Summary libcurl version 8.16.0 contains a critical SMTP command injection vulnerability CVE-quality in the implementation of RFC 3461 Delivery Status Notification DSN parameter support. The vulnerability allows an attacker to inject arbitrary SMTP commands by including CRLF \r\n...

EUVD-2015-8950

Malware in sbrugna...

EUVD-2020-0233

Malware in sbrugna...

EUVD-2019-0769

Malware in sbrugna...

EUVD-2007-2317

Malware in sbrugna...

EUVD-2021-2485

Malware in sbrugna...

EUVD-2018-19542

Malware in sbrugna...

EUVD-2005-1311

Malware in sbrugna...

EUVD-2021-19438

Malware in sbrugna...

EUVD-2017-0290

Malware in sbrugna...

EUVD-2007-1863

Malware in sbrugna...

EUVD-2009-3216

Malware in sbrugna...

EUVD-2005-0452

Malware in sbrugna...

EUVD-2022-45542

Malicious code in bioql PyPI...

EUVD-2024-41751

Malicious code in bioql PyPI...

CVE-2021-4097

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...

Advisory ROSA-SA-2025-2646

software: python2 2.7.18 WASP: ROSA-CHROME packageevrstring: python2-2.7.18-7 CVE-ID: CVE-2022-0391 BDU-ID: 2022-02302 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the urllib.parse module of the Python programming language interpreter is related to the non-neutralization of CRLF sequences...