EUVD-2026-43237

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.testmcpconnection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcpserverconfig.url leads to...

CVE-2026-56259

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by...

CVE-2026-56259 Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by...

CVE-2026-56259 Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. Attackers can exploit the unauthenticated /md, /llm, and /llm/job endpoints by...

CVE-2026-15493

creationtimestamp| type| source ---|---|--- 2026-07-12 11:34:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3hhkogs2f 2026-07-13 21:01:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkllvl44d2w...

CVE-2026-15478

creationtimestamp| type| source ---|---|--- 2026-07-12 05:32:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqghalhba72e 2026-07-12 07:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgoluie5z24...

CVE-2026-5435

creationtimestamp| type| source ---|---|--- 2026-07-11 17:20:42+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25...

GHSA-FJ8F-M44G-C479

creationtimestamp| type| source ---|---|--- 2026-07-11 17:11:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqf5tmpidk2j 2026-10-08 12:34:17+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mxehtmrzbl2i...

CVE-2026-56240

creationtimestamp| type| source ---|---|--- 2026-07-11 14:39:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeve5iuvl2x 2026-07-12 11:39:49+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqh3qwdo2326...

CVE-2026-56372

creationtimestamp| type| source ---|---|--- 2026-07-11 14:38:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevco3uzu26 2026-07-11 15:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeyqtibnl27 2026-07-14 10:40:04+00:00| seen|...

CVE-2026-61428

creationtimestamp| type| source ---|---|--- 2026-07-11 14:35:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev3wf3rx2a 2026-07-11 16:17:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2swit5a26 2026-10-07 14:06:56+00:00| published-proof-of-concept|...

CVE-2026-61454 Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__

The Grav Admin2 plugin getgrav/grav-plugin-admin2 before 2.0.4 embeds a global JavaScript variable window.GRAVCONFIG in the Admin2 SPA bootstrap page at /grav/admin and its subroutes. This object is returned in every unauthenticated response and discloses the server URL, API prefix, admin base...

CVE-2026-12103

creationtimestamp| type| source ---|---|--- 2026-07-11 07:34:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5lme3vf27 2026-07-11 08:27:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeak6gj4c2z...

CVE-2026-11591

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5i7gwfo22 2026-07-11 08:17:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe7xzwjop2g...

CVE-2026-9738

creationtimestamp| type| source ---|---|--- 2026-07-11 05:35:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwwpdlav26...

CVE-2026-6803

creationtimestamp| type| source ---|---|--- 2026-07-11 05:30:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwokah6v22...

CVE-2026-13116

creationtimestamp| type| source ---|---|--- 2026-07-11 05:29:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwldkgqs2c 2026-07-14 00:04:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkvu7nhne2f...

CVE-2026-3367

creationtimestamp| type| source ---|---|--- 2026-07-11 04:42:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdty7h4ct26 2026-07-14 00:07:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkvyjmzhr2e...

CVE-2026-5743

creationtimestamp| type| source ---|---|--- 2026-07-11 04:41:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtw4dkgb2i 2026-07-14 00:03:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkvsdedp62a...

CVE-2026-15072

creationtimestamp| type| source ---|---|--- 2026-07-11 04:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtveuinl2s 2026-07-13 23:53:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkv7yxode2y 2026-07-16 08:13:23+00:00| seen|...