Lucene search
+L

263 matches found

Kitploit
Kitploit
•added 2026/10/24 8:46 a.m.•27 views

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

9.8CVSS9.3AI score0.99992EPSS
SaveExploits179
Kitploit
Kitploit
•added 2026/10/24 6:35 a.m.•26 views

Burp-Encode-IP

About This extension will encode an IP address into a bunch of less known encoding techniques. This technique is focused on testing vulnerabilities such as SSRF Server-Side Request Forgery, Open Redirect or RFI Remote File Inclusion. TL;DR Easy Install If you have Burp Pro it is possible to insta...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/22 5:51 a.m.•18 views

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 Description: The CVE-2023-32315 vulnerability affects Openfire servers, allowing an attacker to bypass the web admin panel login without valid credentials. The exploit adds an administrative user, allowing the attacker to upload a malicious plugin and obtain a web shell. ⚙️ How it...

8.6CVSS8.4AI score0.99999EPSS
SaveExploits17
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/21 11:22 a.m.•8 views

Security Bulletin: Multiple vulnerabilities in Python affect AIX

Summary Vulnerabilities in Python: SSL/TLS Security Vulnerabilities CVE-2026-19553, CVE-2026-19445, Archive Extraction / Tarfile Vulnerabilities CVE-2026-19672, CVE-2026-82049, CVE-2026-87910, Authentication / Credential Exposure CVE-2026-15806, Memory Management Vulnerabilities CVE-2026-15310,...

9.2CVSS6.5AI score0.00734EPSS
SaveExploits2Affected Software2
IBM AIX
IBM AIX
•added 2026/10/21 12:15 a.m.•8 views

Multiple vulnerabilities in Python affect AIX

IBM SECURITY ADVISORY First Issued: Wed Oct 21 00:15:44 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory22.asc Security Bulletin: Multiple vulnerabilities in Python affect AIX...

9.2CVSS6.9AI score0.00734EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•7 views

CVE-2026-110687: Improper Handling of Unicode Encoding

Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16cmp. canonical sorts keys by UTF-16 code units. When any key in a hash is UTF-8 flagged, every key is decoded as UTF-8 for the comparison, including byte-string keys that the encod...

5.9AI score0.00171EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/14 4:17 p.m.•10 views

CVE-2026-89074

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

8.8CVSS0.0045EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 3:12 p.m.•40 views

CVE-2026-89074 MOVEit Transfer Email MFA Bypass

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

7.5CVSS0.0045EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 3:12 p.m.•25 views

CVE-2026-89074

Progress MOVEit Transfer is vulnerable to a security issue caused by improper handling of unicode encoding . This vulnerability affects versions prior to 2025.1.6 and versions from 2026.0.0 up to (but before) 2026.0.4 . The impact includes potential bypass of email MFA. No specific exploit detail...

8.8CVSS5.7AI score0.0045EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/10/14 3:12 p.m.•13 views

EUVD-2026-101156

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

7.5CVSS5.7AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•15 views

PT-2026-114326

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer contains an issue involving the improper handling of unicode encoding, which is a character encoding standard us...

8.8CVSS5.7AI score0.0045EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•9 views

CVE-2026-89074: Improper Handling of Unicode Encoding

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

8.8CVSS5.7AI score0.0045EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/06 8:17 p.m.•26 views

DEBIAN-CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 8:17 p.m.•16 views

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS0.00823EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/06 8:17 p.m.•16 views

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/06 8:17 p.m.•20 views

UBUNTU-CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/06 7:49 p.m.•25 views

CVE-2026-105241

The Apache log4net logging framework (versions 1.2.9 before 3.5.0 ) is vulnerable to an Improper Handling of Unicode Encoding issue within the SmtpPickupDirAppender component. If the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate , it causes the write o...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:49 p.m.•13 views

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/06 7:49 p.m.•12 views

EUVD-2026-93866

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.9AI score0.00823EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 7:49 p.m.•57 views

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS0.00823EPSS
SaveExploits0References3
Rows per page
Query Builder