curl: URL API: triple-slash parses path segment as hostname

Summary libcurl's URL API misparses http:///host/path. Per RFC 3986, the authority between // and / is empty, so /host/path is the path. But parseurl in lib/urlapi.c treats the first segment as the hostname. On line 1087, the slash counter i reaches 3, which is within the valid 1-3 range, and hos...

CVE-2026-71497

creationtimestamp| type| source ---|---|--- 2026-08-07 08:33:25+00:00| seen| https://gist.github.com/alon710/b4340b7774927252fafb9cfdb5e51a49...

Security Bulletin:Vulnerability in pip affects IBM Netezza Appliance

Summary The pip package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2023-5752 Vulnerability Details CVEID:CVE-2023-5752 DESCRIPTION: When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified...

CVE-2026-15032

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

CVE-2026-16633

creationtimestamp| type| source ---|---|--- 2026-08-07 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117052697803115128 2026-08-07 07:37:49+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...

CVE-2026-15032

The wpDiscuz WordPress plugin (versions

GHSA-J4R3-HG7J-8CHG

creationtimestamp| type| source ---|---|--- 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...

CVE-2026-45204

creationtimestamp| type| source ---|---|--- 2026-08-07 04:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itsamjl4gbagk...

CVE-2026-19189

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...

CVE-2026-5391

creationtimestamp| type| source ---|---|--- 2026-08-07 03:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u...

CVE-2026-19149

creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...

CVE-2026-64638

creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...

[SECURITY] Fedora 43 Update: curl-8.15.0-8.fc43

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-56161

creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...

CVE-2026-50481

creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...

CVE-2026-43631

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:14+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuej42h2o...

CVE-2026-70558

creationtimestamp| type| source ---|---|--- 2026-08-07 00:36:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26 2026-08-09 14:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w...

EUVD-2026-54184

AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...

PT-2026-69068

Name of the Vulnerable Software and Affected Versions Code Embed WordPress plugin versions prior to 2.6.1 Description Stored Cross-Site Scripting XSS occurs through the external URL embed feature in post content. The software scans rendered content for URL embed tokens, fetches the remote URL, an...

PT-2026-69025

Name of the Vulnerable Software and Affected Versions ShareOpenly versions prior to 1.2.1 Description Cross-Site Scripting occurs due to the missing esc url escaping function on the $url variable before it is rendered into HTML content. This variable is constructed using home url add query arg...