PT-2026-66543

MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update tool passes caller-supplied download url and download callback url values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace...

PT-2026-66438

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

CVE-2026-61526: Improper Neutralization of Input During Web Page Generation

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

PT-2026-66493

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The Application Layer Policy, which uses Dikastes to enforce HTTP rules, does not perform URL path normalization. This allows HTTP requests containing repeated slashes, encoded slashes, or...

PT-2026-66529

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is url safe in src/helpers.ts strips the @ userinfo delimiter with remove at symbol in string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-...

Linux Distros Unpatched Vulnerability : CVE-2026-17849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL...

CVE-2026-17912: URL Redirection to Untrusted Site

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-12436

creationtimestamp| type| source ---|---|--- 2026-07-29 22:09:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v 2026-07-30 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen|...

pip would incorrectly handle doubly-encoded package URLs from indexes

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...

CVE-2026-67431

creationtimestamp| type| source ---|---|--- 2026-07-29 21:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsu6t2mfx2q 2026-07-30 16:35:20+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv 2026-07-31...

CVE-2026-5487

creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...

CVE-2026-5056

creationtimestamp| type| source ---|---|--- 2026-07-29 20:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssxkpesz2a 2026-07-30 02:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsrrucq2d...

CVE-2026-67430

creationtimestamp| type| source ---|---|--- 2026-07-29 20:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o 2026-07-30 16:35:25+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh 2026-07-31...

CVE-2026-63118

creationtimestamp| type| source ---|---|--- 2026-07-29 20:51:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssjm3jv424 2026-07-30 16:35:30+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-rjr6-rcgv-9m7m 2026-07-31...

CVE-2026-4672

creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...

CVE-2026-5057

creationtimestamp| type| source ---|---|--- 2026-07-29 20:48:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssdrpgf22a 2026-07-30 02:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsycxab2o...

CVE-2026-3093

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

CVE-2026-67436

CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...

EUVD-2026-50554

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...