CVE-2026-112943

A flaw was found in launch-editor. When running on Windows systems, the package fails to properly escape percent characters when passing arguments to the Windows command shell. If an environment variable contains malicious values, an attacker could exploit this behavior to achieve arbitrary code...

EUVD-2011-1588

Malware in sbrugna...

CVE-2019-7216

An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php...

Double free

queryparams.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service infinite recursion and crash via an HTTP query that contains %% double percent characters...

CVE-2013-7298: Undefined Security Weakness

queryparams.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service infinite recursion and crash via an HTTP query that contains %% double percent characters...

PT-2014-3341

Name of the Vulnerable Software and Affected Versions cxxtools versions prior to 2.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in infinite recursion and a crash. This can be achieved by sending an HTTP query that contains double percent %% characters...

CVE-2007-3837

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

CVE-2006-6753

Event Viewer eventvwr.exe in Microsoft Windows does not properly display log data that contains '%' percent characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain...

CVE-2006-6753

Event Viewer eventvwr.exe in Microsoft Windows does not properly display log data that contains '%' percent characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain...

CVE-2003-1135: Undefined Security Weakness

Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service crash via a file send request sendfile with a large number of "%" percent characters after the Yahoo ID...

CVE-2002-2406

Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service hang via a large number of percent characters % in an HTTP GET request...