CVE-2025-52488

DNN Unicode Path Normalization NTLM Hash Disclosure Exploit CVE-2025-52488 Overview This exploit targets a vulnerability in DNN formerly DotNetNuke versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode path normalization attacks. Vulnerability Details CVE I...

Moderate: Red Hat Security Advisory: perl-URI security update

An update for perl-URI is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization

A flaw was found in the URI component for Perl. This vulnerability occurs because the nameprep function, responsible for encoding hostnames, does not properly normalize Unicode characters. As a result, a hostname that is not in a standard Unicode form non-NFC can be encoded into a non-standard...

CVE-2023-46404

CVE-2023-46404 PCRS is a webapp for online programming exercises developed at the University of Toronto. See Bitbucket repository: https://bitbucket.org/utmandrew/pcrs/src/3.11/ Summary PCRS “Questions” page with code submission and “Code editor” page are vulnerable to remote code execution RCE b...

Moderate: Red Hat Security Advisory: perl-URI security update

An update for perl-URI is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization

A flaw was found in the URI component for Perl. This vulnerability occurs because the nameprep function, responsible for encoding hostnames, does not properly normalize Unicode characters. As a result, a hostname that is not in a standard Unicode form non-NFC can be encoded into a non-standard...

CVE-2026-26128

CVE-2026-26128 Python tool to exploit Kerberos reflection via Unicode normalization in Windows Active Directory. Based on research by Guillaume André / Synacktiv. Installation These tools are only compatible with Python 3.8+. Clone the repository from GitHub, install the dependencies and you shou...

RHEL 9 : perl-URI (RHSA-2026:98472)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98472 advisory. This module implements the URI class. Objects of this class represent Uniform Resource Identifier references as specified in RFC 2396 and updated by...

RHEL 10 : perl-URI (RHSA-2026:98578)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98578 advisory. This module implements the URI class. Objects of this class represent Uniform Resource Identifier references as specified in RFC 2396 and updated b...

CVE-2026-2395

CVE-2026-23950 Proof of concept for CVE-2026-23950 - Race condition vulnerability in tar package. Description This repository demonstrates a race condition vulnerability in the tar npm package version 7.5.3 that allows for file collision during extraction. The vulnerability exploits Unicode...

Medium: perl-URI

Issue Overview: URI::idna::nameprep only lowercased the label and skipped the Unicode normalization that RFC 3490/3491 require. As a result, a host that was not already in NFC encoded to a non-standard A-label that disagrees with what browsers, curl, Go, Java, and Python compute for the same inpu...

Amazon Linux 2023 : perl-URI, perl-URI-tests (ALAS2023-2026-3403)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3403 advisory. URI::idna::nameprep only lowercased the label and skipped the Unicodenormalization that RFC 3490/3491 require. As a result, a host that wasnot already in NFC encoded to a non-standard A-label that...

Medium: perl-URI

Issue Overview: URI::idna::nameprep only lowercased the label and skipped the Unicode normalization that RFC 3490/3491 require. As a result, a host that was not already in NFC encoded to a non-standard A-label that disagrees with what browsers, curl, Go, Java, and Python compute for the same inpu...

CVE-2025-64458-Demo

CVE-2025-64458 — Django Redirect DoS on Windows Description A denial-of-service DoS issue in Django’s redirect responses allows an attacker to trigger excessive CPU work during URL normalization when constructing redirect responses. On Windows, Python’s Unicode NFKC normalization is particularly...

EulerOS 2.0 SP12 : perl-URI (EulerOS-SA-2026-4439)

According to the versions of the perl-URI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...

EulerOS 2.0 SP12 : perl-URI (EulerOS-SA-2026-4516)

According to the versions of the perl-URI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...

RLSA-2026:85917 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 For more details about the security issue...

Rocky Linux 8 [CIQ] Security Update: perl / perl-Algorithm-Diff / perl-Archive-Tar / perl-Archive-Zip / etc (crlsa-2026_85917)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685917 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

AlmaLinux 8 : perl:5.32 (ALSA-2026:85917)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:85917 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

Moderate: Red Hat Security Advisory: perl:5.32 security update

An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...