123123 matches found
CVE-2026-51119
creationtimestamp| type| source ---|---|--- 2026-07-10 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsnl6hmo2b 2026-07-10 22:43:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7wcheku2c 2026-07-11 00:51:44+00:00| seen|...
CVE-2026-51597
creationtimestamp| type| source ---|---|--- 2026-07-10 18:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsjz26m72r 2026-07-11 00:34:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg3vxy2e27...
CVE-2026-57736
creationtimestamp| type| source ---|---|--- 2026-07-10 18:07:16+00:00| seen| https://bsky.app/profile/martechnotes.bsky.social/post/3mqcqi72gkh2b...
CVE-2026-55671
ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...
EUVD-2026-42978
ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...
MAL-2026-10153 Malicious code in notifier-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c2346bef8105dc24079ee47eb8cd65dbb92f7dbbd6d17ac0c576646878298c The package presents itself as a pino-compatible logger main entry exports a middleware aliased as pino, and lib/ contains pino-shaped files such as...
CVE-2026-56814
creationtimestamp| type| source ---|---|--- 2026-07-10 16:43:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqclt7fdnp27...
Server-side Request Forgery (SSRF)
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-53653 Grav: Unauthenticated denial of service via unbounded image derivative dimensions
Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust server memory and CPU by requesting image derivatives with oversized dimensions through URL query image actions such as forceResize in Grav::fallbackUrl, which passes request...
CVE-2026-53653 Grav: Unauthenticated denial of service via unbounded image derivative dimensions
Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated visitor to exhaust server memory and CPU by requesting image derivatives with oversized dimensions through URL query image actions such as forceResize in Grav::fallbackUrl, which passes request...
CVE-2026-48043
creationtimestamp| type| source ---|---|--- 2026-07-10 15:58:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjc5vizd2e...
GHSA-PJHX-3C3W-9V23
creationtimestamp| type| source ---|---|--- 2026-07-10 15:41:54+00:00| seen| https://gist.github.com/alon710/a56efdb02fd3817ca2ff1035bbcd74e4...
CVE-2026-29519
Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by embedding HTML or JavaScript payloads...
CVE-2026-29519 Lucee CFML Server Reflected XSS via URL Path Parsing
Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by embedding HTML or JavaScript payloads...
EUVD-2026-42906
Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by embedding HTML or JavaScript payloads...
CVE-2026-29519
CVE-2026-29519 affects Lucee CFML Server across 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines. It describes a reflected cross-site scripting vulnerability in URL path parsing, where unauthenticated remote attackers can cause arbitrary JavaScript to execute in a victim’s browser by embedding payloa...
CVE-2026-29519 Lucee CFML Server Reflected XSS via URL Path Parsing
Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by embedding HTML or JavaScript payloads...
CVE-2026-57227
creationtimestamp| type| source ---|---|--- 2026-07-10 14:00:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25 2026-09-18 23:03:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvtbnkcmwv24 2026-09-18 23:11:55+00:00| seen|...
CVE-2026-60091 PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url
PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint. The webhookurl parameter is validated at request time but re-resolved at connection time, allowing attackers to use DNS rebinding to reach internal services with a...