Search Vulnerabilities

Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream

Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()

HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values

SD-330AC and AMC Manager provided by silex technology, Inc

Openfind｜MailGates/MailAudit - CRLF Injection

CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset wh...

Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output

FTP Command Injection via CRLF in basic-ftp

oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

CI4MS has an .env CRLF Injection via Unvalidated `host` Parameter in Install Controller

Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection

Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection

Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

Rack: Header injection in multipart requests

Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'

iCalendar has ICS injection via unsanitized URI property values

A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthentic...