30 matches found
CVE-2026-41940
CVE-2026-41940 ✅ スクリプト分析（スキャナーの動作と仕組み） ✅ 根本原因の技術的説明（CRLF/Session.pm の差分） ✅ 予防 — パッチコマンド、セキュアコーディングの教訓 ✅ 緩和策 — ファイアウォールルール、WAF設定、堅牢化 ✅ IOCハンティング — 既に攻撃を受けたかどうかの検出 ✅ VaPT手法 — スコープ設定、偵察、報告フレームワーク、MITREマッピング ✅ リスクスコアリング、モバイルナビゲーション、コピーボタン、折りたたみセクション...
PT-2026-42364
Vikunja has iCalendar Property Injection via CRLF in CalDAV Task Output in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabilit...
The vulnerability of the forward-auth plugin for the Apache APISIX cloud API gateway allows a hacker to bypass existing security mechanisms and gain unauthorized access to protected information.
The vulnerability of the forward-auth plugin for the Apache APISIX cloud API lies in the improper handling of CRLF sequences. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by sending specially crafted...
The vulnerability of the protectWhitespace() function in the FTP-client library basic-ftp of the Node.js software platform allows a hacker to execute arbitrary commands.
The vulnerability of the protectWhitespace function in the FTP-client library of the Node.js software platform’s basic-ftp library is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
CVE-2026-35601 Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT value escaping. User-controlled task titles containing CRLF characters break the iCalendar propert...
EUVD-2017-17731
Malware in sbrugna...
EUVD-2018-4447
Malware in sbrugna...
EUVD-2016-8872
Malware in sbrugna...
EUVD-2005-2062
Malware in sbrugna...
EUVD-2021-24064
Malware in sbrugna...
Ivanti Policy Secure 22.x XSS Vulnerability
The Ivanti Policy Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by a CRLF vulnerability. This vulnerability allows an authenticated high-privileged user to inject malicious code on a victimâs browser, thereby leading to cross-site scripting attack. Note that...
Ivanti Connect Secure 9.x / 22.x XSS Vulnerability
The Ivanti Connect Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by a CRLF vulnerability. This vulnerability allows an authenticated high-privileged user to inject malicious code on a victimâs browser, thereby leading to cross-site scripting attack. Note that...
CVE-2021-37499
CRLF vulnerability in Reprise License Manager RLM web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers...
Crlf injection
CRLF vulnerability in Reprise License Manager RLM web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers...
CVE-2021-37499
CRLF vulnerability in Reprise License Manager RLM web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers...
CVE-2021-37499
CRLF vulnerability in Reprise License Manager RLM web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers...
CVE-2021-37499
The CVE-2021-37499 entry describes a CRLF injection vulnerability in Reprise License Manager (RLM) web interface up to version 14.2BL4, located in the password parameter of the View License Result function. The underlying issue is unsanitized user input that allows remote attackers to inject arbi...
Arsenal - Recon Tool installer
Arsenal is a Simple shell script Bash used to install the most important tools and requirements for your environment and save time in installing all these tools. Tools in Arsenal Name | description ---|--- Amass | The OWASP Amass Project performs network mapping of attack surfaces and external...
CRLF vulnerability in Fiber
Impact The filename that is given in c.Attachment is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to...
GHSA-9CX9-X2GP-9QVH CRLF vulnerability in Fiber
Impact The filename that is given in c.Attachment is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to...