Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
CWE-116 - Improper Encoding or Escaping of Output
CWE Weakness
Threat entity extracted from intelligence sources
Entities
›
cwe
›
CWE-116 - Improper Encoding or Escaping of Output
Frequency
7
occurrences
First Seen
August 11, 2026
Last Seen
October 31, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Threat Actors
Cerber
Tools
Osascript
Owasp Esapi
PHP2Shell
CVEs
CVE-2026-13639
CVE-2026-13684
CVE-2026-13623
CVE-2026-13635
CVE-2026-13666
CVE-2026-13673
CVE-2026-13683
CVE-2026-6205
Regions
China
Japan
South Korea
Taiwan
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
1
EX
Execution
T1059 - Command and Scripting Interpreter
-
PE
Persistence
No techniques detected
1
PE
Priv Esc
T1068 - Exploitation for Privilege Escalation
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
-
EX
Exfil
No techniques detected
1
IM
Impact
T1486 - Data Encrypted for Impact
3
techniques detected across
3
tactics
Related Clusters (1)
Command Injection Vulnerability in GitAhead Affects macOS Users
Oct 7
·
0 sources
52
Related Articles (7)
Synology-SA-26:13
www.synology.com
·
Oct 31
Ransomware 'C3RB3R' Hits Synology NAS: 3.9 Million Won in Bitcoin Demanded, No Fix ...
Finance.Biggo
·
Oct 30
Gitahead Issues 663
github.com
·
Oct 7
Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS
Api.Msrc.Microsoft
·
Sep 15
CWE-116: Improper Encoding or Escaping of Output
cwe.mitre.org
·
Sep 8
CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Api.Msrc.Microsoft
·
Sep 8
CWE-20: Improper Input Validation
cwe.mitre.org
·
Aug 11
Prev
1 / 2
Next
Related Entities
Sql Injection
Zero-day Exploit
Denial-of-Service
Ransomware
360
KISA
Synology
China
Japan
South Korea
Taiwan
CVE-2026-13639