Read the docs

GeneralSandman

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

GeneralSandman records in CISA KEV

No GeneralSandman vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-47512 CVE-2026-67185 · GHSA-qh4x-9gfh-82jc

TinyWeb 0.0.8 Path Traversal via URL Path Component

Priority HIGH 77

TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured w…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00546 Published 2026-07-28 No fix listed CWE-22
TI-2026-47511 CVE-2026-67184 · GHSA-r4g2-gw8j-xgxv

TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

Priority HIGH 77

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00608 Published 2026-07-28 No fix listed CWE-476
TI-2026-47510 CVE-2026-67183 · GHSA-9hxr-3mx5-3v44

TinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling

Priority HIGH 77

TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available memory by sending ordinary well-formed HTTP requests.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00509 Published 2026-07-28 No fix listed CWE-401
Open these records in search →