Lucene search
+L

257 matches found

Kitploit
Kitploit
•added 2026/10/16 3:36 p.m.•22 views

Burp-Encode-IP

About This extension will encode an IP address into a bunch of less known encoding techniques. This technique is focused on testing vulnerabilities such as SSRF Server-Side Request Forgery, Open Redirect or RFI Remote File Inclusion. TL;DR Easy Install If you have Burp Pro it is possible to insta...

5.9AI score
SaveExploits0References3
NVD
NVD
•added 2026/10/14 4:17 p.m.•6 views

CVE-2026-89074

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

7.5CVSS0.00398EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 3:12 p.m.•11 views

CVE-2026-89074

Progress MOVEit Transfer is vulnerable to a security issue caused by improper handling of unicode encoding . This vulnerability affects versions prior to 2025.1.6 and versions from 2026.0.0 up to (but before) 2026.0.4 . The impact includes potential bypass of email MFA. No specific exploit detail...

7.5CVSS5.7AI score0.00398EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 3:12 p.m.•5 views

EUVD-2026-101156

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

7.5CVSS5.7AI score0.00398EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 3:12 p.m.•34 views

CVE-2026-89074 MOVEit Transfer Email MFA Bypass

Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

7.5CVSS0.00398EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/12 5:53 p.m.•23 views

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

9.8CVSS9.3AI score0.99992EPSS
SaveExploits173
Kitploit
Kitploit
•added 2026/10/12 11:18 a.m.•16 views

Explotacion-CVE-2023-32315-Openfire

šŸ” CVE-2023-32315 Description: The CVE-2023-32315 vulnerability affects Openfire servers, allowing an attacker to bypass the web admin panel login without valid credentials. The exploit adds an administrative user, allowing the attacker to upload a malicious plugin and obtain a web shell. āš™ļø How it...

8.6CVSS8.4AI score0.99999EPSS
SaveExploits17
osv-ubuntu
osv-ubuntu
•added 2026/10/07 12:00 a.m.•13 views

UBUNTU-CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupD...

5.3CVSS5.8AI score0.00823EPSS
SaveExploits0References4
osv-debian
osv-debian
•added 2026/10/06 8:17 p.m.•14 views

DEBIAN-CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 8:17 p.m.•14 views

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS0.00823EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/06 8:17 p.m.•13 views

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References3
osv-cve
osv-cve
•added 2026/10/06 7:49 p.m.•12 views

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.8AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/06 7:49 p.m.•52 views

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS0.00823EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/06 7:49 p.m.•17 views

CVE-2026-105241

The Apache log4net logging framework (versions 1.2.9 before 3.5.0 ) is vulnerable to an Improper Handling of Unicode Encoding issue within the SmtpPickupDirAppender component. If the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate , it causes the write o...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/10/06 7:49 p.m.•11 views

EUVD-2026-93866

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/06 7:49 p.m.•10 views

CVE-2026-105241 Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/06 7:49 p.m.•13 views

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-107233

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper handling of Unicode encoding in the SmtpPickupDirAppender occurs when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate. This causes...

5.3CVSS5.8AI score0.00823EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•9 views

CVE-2026-105241: Improper Handling of Unicode Encoding

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

5.3CVSS5.7AI score0.00823EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•11 views

CVE-2026-19954: Improper Handling of Unicode Encoding

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

5.4CVSS5.7AI score0.00216EPSS
SaveExploits0References2
Rows per page
Query Builder