122667 matches found
PT-2026-68764
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions prior to 2.97.0 Description Certain HTTP request URLs interpolate variable path components without percent encoding. This allows URL path metacharacters within attacker-controlled repository or resource values to redirec...
IBM Langflow OSS path traversal vulnerability (CNVD-2026-32376)
IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a path traversal vulnerability. This vulnerability arises from failing to properly validate URL-encoded path traversal sequences in file names when handling MCP resources/read...
CVE-2026-64653: Improper Limitation of a Pathname to a Restricted Directory
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-18597: Server-Side Request Forgery (SSRF)
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...
EulerOS 2.0 SP13 : mutt (EulerOS-SA-2026-3032)
According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest.CVE-2026-43859 In mutt before 2.3.2, the imapauthgss...
PT-2026-68374
Name of the Vulnerable Software and Affected Versions Forminator Forms – Contact Form, Payment Form & Custom Form Builder versions prior to 1.56.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a techniqu...
PT-2026-68508
🚨 CVE-2026-28141 - high 🚨 NextGEN Gallery = 4.2.3 - Reflected Cross-Site Scripting NextGEN Gallery through 4.2.3 reflects a URL-decoded ngg tag route value into the g... 👾 https://t.co/No4GJJJ3Dv @pdnuclei NucleiTemplates cve...
EulerOS 2.0 SP13 : mutt (EulerOS-SA-2026-2982)
According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest.CVE-2026-43859 In mutt before 2.3.2, the imapauthgss...
PT-2026-68366
Name of the Vulnerable Software and Affected Versions heshengtao super-agent-party versions prior to 0.4.2 Description Remote attackers can trigger server-side request forgery SSRF by manipulating the url argument within the sanitize proxy url function located in the server.py file of the extensi...
CVE-2026-18953
creationtimestamp| type| source ---|---|--- 2026-08-05 22:20:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msekrhixql2b 2026-08-06 02:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msex32tqsv2n 2026-08-06 03:26:49+00:00| seen|...
CVE-2026-71318
creationtimestamp| type| source ---|---|--- 2026-08-05 22:20:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dvfbxx3u4bdfr 2026-08-06 03:31:34+00:00| seen| https://gist.github.com/alon710/3d7b500e615305ceff4644e15070fc7a...
CVE-2026-16143
creationtimestamp| type| source ---|---|--- 2026-08-05 21:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mseh43v6iu23...
rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories
Summary rclone serve restic --private-repos exists to let one rclone instance host many users' restic backup repositories behind HTTP Basic auth while keeping each user confined to a path prefix of //. The documentation states the flag "can be used to limit users to repositories starting with a...
GHSA-FQJ9-69PF-6PJG rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories
Summary rclone serve restic --private-repos exists to let one rclone instance host many users' restic backup repositories behind HTTP Basic auth while keeping each user confined to a path prefix of //. The documentation states the flag "can be used to limit users to repositories starting with a...
CVE-2026-67979
creationtimestamp| type| source ---|---|--- 2026-08-05 20:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedovzhwu2f...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to improper context being set during credentials lookup. An attacker can access credentials they are not authorized to use by leveraging Item/Configure permissions to trigger Jenkins to send these credentials t...
CVE-2026-66881
Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...
CVE-2026-66881 Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download
Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...
EEF-CVE-2026-66881 Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download
Summary Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry...