Skip to content
Noroxi

Ritlabs records

16 published records for vendor ritlabs.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
37.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 24
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2026-22781
    41Plan

    TinyWeb CGI Command Injection

    CriticalCVSS 10.0No exploitEPSS 2%

    ritlabs · tinywebJan 12, 2026

  • CVE-2026-27613
    40Plan

    CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam)

    CriticalCVSS 10.0No exploitEPSS 0%

    ritlabs · tinywebFeb 25, 2026

  • CVE-2026-28497
    37Monitor

    TinyWeb: Integer Overflow in `_Val` (HTTP Request Smuggling)

    CriticalCVSS 9.3No exploitEPSS 0%

    ritlabs · tinywebMar 6, 2026

  • CVE-2026-29046
    36Monitor

    TinyWeb: HTTP Header Control Character Injection into CGI Environment

    CriticalCVSS 9.2No exploitEPSS 0%

    ritlabs · tinywebMar 6, 2026

  • CVE-2024-34199
    34Monitor

    TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large

    HighCVSS 8.6No exploitEPSS 1%

    ritlabs · tinywebMay 14, 2024

  • CVE-2026-27633
    34Monitor

    TinyWeb has Unbounded Content-Length Memory Exhaustion (DoS)

    HighCVSS 8.7No exploitEPSS 0%

    ritlabs · tinywebFeb 25, 2026

  • CVE-2026-27630
    34Monitor

    TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)

    HighCVSS 8.7No exploitEPSS 0%

    ritlabs · tinywebFeb 25, 2026

  • CVE-2006-0918
    31Monitor

    Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.

    HighCVSS 7.5No exploitEPSS 3%

    ritlabs · the batFeb 28, 2006

  • CVE-2001-0398
    31Monitor

    The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attac

    HighCVSS 7.5No exploitEPSS 2%

    ritlabs · the batJun 18, 2001

  • CVE-2017-17689
    24Monitor

    The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration,

    MediumCVSS 5.9No exploitEPSS 4%

    9folders · nineMay 16, 2018

  • CVE-2024-5193
    22Monitor

    Ritlabs TinyWeb Server Request crlf injection

    MediumCVSS 5.5No exploitEPSS 0%

    ritlabs · tinywebMay 22, 2024

  • CVE-2002-0338
    21Monitor

    The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment who

    MediumCVSS 5.0Proof of conceptEPSS 3%

    ritlabs · the batJun 25, 2002

  • CVE-2001-0675
    21Monitor

    Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account co

    MediumCVSS 5.0Proof of conceptEPSS 3%

    ritlabs · the batSep 20, 2001

  • CVE-2006-0630
    20Monitor

    RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the

    MediumCVSS 5.0No exploitEPSS 1%

    ritlabs · the batFeb 10, 2006

  • CVE-2001-0676
    20Monitor

    Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "

    MediumCVSS 5.0No exploitEPSS 1%

    ritlabs · the batSep 20, 2001

  • CVE-2003-1133
    8Monitor

    Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email m

    LowCVSS 2.1No exploitEPSS 0%

    ritlabs · the batDec 31, 2003