CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...

CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

CVE-2026-67350

Serendipity

CVE-2025-67649

creationtimestamp| type| source ---|---|--- 2026-07-31 12:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwykdmmt52v 2026-07-31 16:45:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649 2026-08-01 11:39:40+00:00| seen|...

CVE-2026-14537

creationtimestamp| type| source ---|---|--- 2026-07-31 12:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwyd6ujnv2v...

CVE-2026-38709

creationtimestamp| type| source ---|---|--- 2026-07-31 12:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxk74bif2v...

CVE-2026-46594 Reflected XSS in PHP Poll Script

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

CVE-2026-46594 Reflected XSS in PHP Poll Script

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

CVE-2026-46594

A reflected XSS vulnerability affects the PHP Jabbers - PHP Poll Script. A crafted URL can trigger arbitrary JavaScript execution in the victim’s browser. The issue is resolved in version 4.1; upgrading to 4.1 or later is recommended. The available documents do not provide exploitation status, sp...

CVE-2026-64804

creationtimestamp| type| source ---|---|--- 2026-07-31 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwuhubrry2v...

CVE-2026-62391

creationtimestamp| type| source ---|---|--- 2026-07-31 11:36:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2 2026-09-02 12:05:14+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j...

vulnerabilities are hidden in JFrog Artifactory

JFrog has addressed several vulnerabilities in JFrog Artifactory. The vulnerabilities concern various components of JFrog Artifactory. - There is a possibility of privilege escalation, as the system does not control the scope of tokens, allowing attackers to elevate their privileges. - Users with...

CVE-2026-16236

creationtimestamp| type| source ---|---|--- 2026-07-31 08:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/73yfkyntgsmwp 2026-07-31 23:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mry2rlharq2i...

GHSA-RJR6-RCGV-9M7M

creationtimestamp| type| source ---|---|--- 2026-07-31 07:31:41+00:00| seen| https://gist.github.com/alon710/f097a8ec4fd3160f0611d4f0d84400e7...

CVE-2026-62416

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:40+00:00| seen| https://jvn.jp/en/vu/JVNVU92540957 2026-08-03 10:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3myb6nvixzxk7...

CVE-2026-60011

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:38+00:00| seen| https://jvn.jp/en/vu/JVNVU98759887 2026-08-03 10:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fpysahdivspe 2026-08-04 03:18:29+00:00| seen|...

CVE-2026-66408

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:30+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-66407

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:28+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348 2026-08-10 11:25:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117070962122003813...