CVE-2026-19354

creationtimestamp| type| source ---|---|--- 2026-08-09 14:47:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a4ovjan3ipnsr...

CVE-2026-15153

creationtimestamp| type| source ---|---|--- 2026-08-09 14:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msnrkhs5la26...

CVE-2026-19340 anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgery

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/completebackend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possibl...

CVE-2026-18603

creationtimestamp| type| source ---|---|--- 2026-08-09 06:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gu4ns4p4elmp...

CVE-2026-19337

CVE-2026-19337 affects the package adenot mcp-google-search up to version 0.3.1. The vulnerability is in an unknown function within src/index.ts of the component read_webpage , enabling server-side request forgery (SSRF) through manipulation of the url argument. The attack is described as restric...

CVE-2026-19337 adenot mcp-google-search read_webpage index.ts server-side request forgery

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...

CVE-2026-10595 Path Traversal Vulnerability in parisneo/lollms

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in backend/routers/ui.py. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without...

CVE-2026-71988

creationtimestamp| type| source ---|---|--- 2026-08-09 02:02:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmihftfgd2y 2026-08-09 09:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msn7vxua2v2k...

PT-2026-69313

Name of the Vulnerable Software and Affected Versions KS-GEN-AI jira-mcp-server version 0.2.0 Description An issue exists in the add attachment from public url component within the src/index.ts file. The axios.get function is susceptible to server-side request forgery SSRF, a condition where an...

PT-2026-69320

Name of the Vulnerable Software and Affected Versions dmitriiweb article-scraper-mcp version 1.0.0 Description A remote attacker can perform server-side request forgery SSRF, a technique that allows a server to be coerced into making requests to an unintended location, by manipulating the url...

PT-2026-69278

Name of the Vulnerable Software and Affected Versions adenot mcp-google-search versions prior to 0.3.2 Description A server-side request forgery SSRF issue exists within the read webpage component in the src/index.ts file. This occurs when the url argument is manipulated, allowing for local...

CVE-2026-18988

creationtimestamp| type| source ---|---|--- 2026-08-08 21:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslykpomvr2a...

CVE-2026-71944

creationtimestamp| type| source ---|---|--- 2026-08-08 18:53:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mslqloolu42n 2026-08-09 07:19:35+00:00| seen| https://bsky.app/profile/potato.software/post/3msn2bnw4s22i...

CVE-2026-42170

creationtimestamp| type| source ---|---|--- 2026-08-08 18:50:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mslqghmhwu2g...

CVE-2026-71945

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...

CVE-2026-71944

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...

CVE-2026-8496

creationtimestamp| type| source ---|---|--- 2026-08-08 17:03:31+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mslkgvjtcb2o...

CVE-2026-14222

creationtimestamp| type| source ---|---|--- 2026-08-08 15:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msleguihrb2y...

CVE-2026-14305

creationtimestamp| type| source ---|---|--- 2026-08-08 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskjmk2wcy2u 2026-08-09 03:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmmoe6fis2l...

CVE-2015-6609

creationtimestamp| type| source ---|---|--- 2026-08-08 04:30:05+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3mskadlvn4c2c 2026-08-08 15:03:18+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3msldpwlkik2w 2026-08-09 03:19:22+00:00| seen|...