Lucene search
K

13 matches found

OSV
OSV
added 2026/05/04 1:12 p.m.0 views

JLSEC-2026-405

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

9.8CVSS6.2AI score0.00179EPSS
Exploits1References10
Broadcom
Broadcom
added 2026/01/27 12:0 a.m.14 views

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

8.8CVSS7.6AI score0.00179EPSS
Exploits1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-27699

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00334EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2023/06/05 11:46 a.m.3 views

curl: TELNET option IAC injection

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

9.8CVSS7.5AI score0.00179EPSS
Exploits1References5
Redos
Redos
added 2023/04/06 12:0 a.m.2 views

ROS-20230406-21

A vulnerability in the curl program is related to data exchange using the TELNET protocol, which could allow an attacker to pass a specially crafted username and "telnet parameters" during a server negotiation. Exploitation of the vulnerability could allow an attacker acting remotely, to send...

9.8CVSS7.8AI score0.00179EPSS
Exploits2
OSV
OSV
added 2023/03/31 11:5 a.m.2 views

OESA-2023-1193 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However,...

9.8CVSS8.9AI score0.00179EPSS
Exploits5References6
OSV
OSV
added 2023/03/31 11:5 a.m.3 views

OESA-2023-1195 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However,...

9.8CVSS8.9AI score0.00179EPSS
Exploits5References6
OSV
OSV
added 2023/03/30 8:15 p.m.1 views

AZL-25894 CVE-2023-27533 affecting package curl for versions less than 8.0.1-1

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

8.8CVSS7.2AI score0.00179EPSS
Exploits1References1
OSV
OSV
added 2023/03/30 8:15 p.m.0 views

AZL-34608 CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

8.8CVSS7.1AI score0.00179EPSS
Exploits1References1
OSV
OSV
added 2021/09/05 7:15 p.m.0 views

CVE-2021-40523

In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT response for DO and WILL commands because of improper handling of exception condition, which leads to property violations and denial of...

7.5CVSS6AI score
Exploits0References1
CNNVD
CNNVD
added 2021/09/05 12:0 a.m.2 views

Contiki 代码问题漏洞

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. Contiki-os Contiki has a code issue vulnerability that stems from improper handling of Telnet option negotiation in Contiki 3.0. The server and client may fail to give a WILL/WONT or DO/DONT response to ...

7.5CVSS7.7AI score0.00334EPSS
Exploits0References2
0day.today
0day.today
added 2016/12/05 12:0 a.m.33 views

NetCat 0.7.1 - Denial of Service Exploit

Exploit for linux platform in category dos / poc /usr/bin/python -- Coding: utf-8 -- GNU Netcat 0.7.1 - Out of bounds array write Access Violation by n30m1nd Date: 2016-11-19 Exploit Author: n30m1nd Vendor Homepage: http://netcat.sourceforge.net/ Software Link:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2016/12/05 12:0 a.m.24 views

NetCat 0.7.1 - Denial of Service

NetCat 0.7.1 - Denial of Service /usr/bin/python -- Coding: utf-8 -- GNU Netcat 0.7.1 - Out of bounds array write Access Violation by n30m1nd Date: 2016-11-19 Exploit Author: n30m1nd Vendor Homepage: http://netcat.sourceforge.net/ Software Link:...

7.3AI score
Exploits0
Rows per page
Query Builder