Maximmasiutin vulnerabilities
We track 6 vulnerabilities in Maximmasiutin products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.
Latest Maximmasiutin vulnerabilities
- 8.2 High severity
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header values and later maps them into CGI environment variables (HTTP_*). The parser did not strictly reject dangerous control characters in head
- 9.1 Critical severity
TinyWeb: Integer Overflow or Wraparound
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine (_Val) allows an unauthenticated remote attacker to bypass Content-Length restrictions and p
- 7.5 High severity
TinyWeb: Allocation of Resources Without Limits or Throttling
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Service (DoS) vulnerability via memory exhaustion. Unauthenticated remote attackers can send an HTTP POST request to the server with an exception
- 7.5 High severity
TinyWeb: Allocation of Resources Without Limits or Throttling
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a Denial of Service (DoS) attack known as Slowloris. The server spawns a new OS thread for every incoming connection without enforcing a maximum
- 9.8 Critical severity
TinyWeb: Improper Neutralization of Special Elements used in an OS Command
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. A vulnerability in versions prior to 2.01 allows unauthenticated remote attackers to bypass the web server's CGI parameter security controls. Depending on the server configuration and the speci
- 9.8 Critical severity
TinyWeb: Improper Neutralization of Special Elements used in an OS Command
TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. TinyWeb HTTP Server before version 1.98 is vulnerable to OS command injection via CGI ISINDEX-style query parameters. The query parameters are passed as command-line arguments to the CGI execut