Skip to content
OpenAdvisories

Product · maximmasiutin

TinyWeb

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-27633

    TinyWeb has Unbounded Content-Length Memory Exhaustion (DoS)

    TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Service (DoS) vulnerability via memory exhaustion. Unauthenticated remote attackers can send an HTTP POST request to the server with an exceptio…

    maximmasiutin TinyWeb
  • High 8.7
    CVE-2026-27630

    TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris)

    TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a Denial of Service (DoS) attack known as Slowloris. The server spawns a new OS thread for every incoming connection without enforcing a maximu…

    maximmasiutin TinyWeb