Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-11 | 1 | Disclosure1 |
| 2026-02-12 | 2 | General1Patch1 |
Warning: High Code Injection in #Keepass. CVE-2020-37178 CVSS: 7.5. A remote attacker can cause app crash without privileges. There is a publicly available exploit. Update to 2.44 or later. #Patch #Patch #Patch
Post summary
CVE-2020-37178 is a code injection flaw in KeePass that can crash the app without privileges; a publicly available exploit exists, and users should update to version 2.44 or newer.
CVE-2020-37178 KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dr… https://www.cve.org/CVERecord?id=CVE-2020-37178
Post summary
The post announces a denial‑of‑service vulnerability in KeePass Password Safe’s HTML handling for versions prior to 2.44, providing basic technical details but no PoC, exploit code, or patch information.
CVE Alert: CVE-2020-37178 - Keepass - KeePass Password Safe - https://www.redpacketsecurity.com/cve-alert-cve-2020-37178-keepass-keepass-password-safe/ #OSINT #ThreatIntel #CyberSecurity #cve-2020-37178 #keepass #keepass-password-safe
Post summary
The tweet merely announces the existence of CVE-2020-37178 and provides a link to an alert page, offering no further details on exploitation, patching, or technical aspects.