https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:13:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-138075 EUVD-2026-138075 https://cve.radiocsirt.org/vuln/euvd-2026-138075 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6405 <p>Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) &#39;+&#39; character, (2) &#39;.&#39; character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.</p> <p>Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) &#39;+&#39; character, (2) &#39;.&#39; character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-6405 https://cve.radiocsirt.org/vuln/ghsa-x4gq-m5g6-gq3v <p>Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) &#39;+&#39; character, (2) &#39;.&#39; character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.</p> <p>Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) &#39;+&#39; character, (2) &#39;.&#39; character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.</p> https://cve.radiocsirt.org/vuln/ghsa-x4gq-m5g6-gq3v https://cve.radiocsirt.org/vuln/gsd-2007-6405 gsd-2007-6405 https://cve.radiocsirt.org/vuln/gsd-2007-6405