122620 matches found
CVE-2026-64638
creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...
[SECURITY] Fedora 43 Update: curl-8.15.0-8.fc43
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2026-56161
creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...
CVE-2026-50481
creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...
CVE-2026-43631
creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:14+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuej42h2o...
CVE-2026-70558
creationtimestamp| type| source ---|---|--- 2026-08-07 00:36:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26 2026-08-09 14:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w...
EUVD-2026-54184
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
PT-2026-69068
Name of the Vulnerable Software and Affected Versions Code Embed WordPress plugin versions prior to 2.6.1 Description Stored Cross-Site Scripting XSS occurs through the external URL embed feature in post content. The software scans rendered content for URL embed tokens, fetches the remote URL, an...
CVE-2026-19246: Server-Side Request Forgery (SSRF)
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-54215: URL Redirection to Untrusted Site
Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for...
PT-2026-69025
Name of the Vulnerable Software and Affected Versions ShareOpenly versions prior to 1.2.1 Description Cross-Site Scripting occurs due to the missing esc url escaping function on the $url variable before it is rendered into HTML content. This variable is constructed using home url add query arg...
CVE-2026-48093: Improper Neutralization of Input During Web Page Generation
The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...
PT-2026-68893
Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525 Description The Webbox component constructs redirect URLs using user-supplied input appended to the redirect target in a 302 HTTP response. An attacker can use URL-encoded characters, such as %2e...
PT-2026-69149
Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.1 Description An issue exists in the Provider-returned Image URL Handler component within the download image data url function of the nanobot/providers/image generation.py file. This flaw allows a remote...
CVE-2026-12071: URL Redirection to Untrusted Site
The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” representing a dot, an attacker can manipulate the portion of the URL following the...
PT-2026-68859
Name of the Vulnerable Software and Affected Versions wpDiscuz versions prior to 7.6.60 Description The plugin fails to properly escape a user-supplied URL before outputting it within an HTML attribute. This allows unauthenticated users to perform Stored Cross-Site Scripting XSS, a technique wher...
Linux Distros Unpatched Vulnerability : CVE-2026-71478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link...
MAL-2026-13482 Malicious code in diezyclutch-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b034105b4e65e2ff38eef557d7b480758070d1122aa6338a6873a9ee76f9111a diezyclutch-baileys is a fork of the Baileys WhatsApp library. In lib/Socket/messages-send.js the code constructs a network destination from a...
CVE-2026-48087
creationtimestamp| type| source ---|---|--- 2026-08-06 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m 2026-08-09 04:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27 2026-08-09 05:28:38+00:00| seen|...
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...