123232 matches found
PT-2026-55914
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
CVE-2026-54893: Improper Encoding or Escaping of Output
URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address...
CVE-2025-8591: Improper Neutralization of Input During Web Page Generation
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
PT-2026-56075
Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.17 Coder versions prior to 2.32.7 Coder versions prior to 2.33.8 Coder versions prior to 2.34.2 Description The coder open app command opens external workspace-app URLs without validating the scheme or host. If an...
PT-2026-55971
Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...
PT-2026-67301
Name of the Vulnerable Software and Affected Versions axios versions 0.31.1 through 0.32.x axios versions 1.15.1 through 1.17.x Description An incomplete depth-limit bypass exists in lib/helpers/toFormData.js when serializing objects with top-level keys ending in . When such a key is present, the...
RHCOS 4 : OpenShift Container Platform 4.15.66 (RHSA-2026:28961)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28961 advisory. - golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 - crypto/x509: golang: Denial of Service...
CVE-2026-59520
creationtimestamp| type| source ---|---|--- 2026-07-05 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrsytwez2p 2026-07-07 08:04:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25geh37n2v...
CVE-2026-49097
creationtimestamp| type| source ---|---|--- 2026-07-05 20:27:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfypfiwx2f 2026-07-09 03:53:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qbtwq7k2y 2026-07-20 15:00:03+00:00| published-proof-of-concept|...
CVE-2026-49086
creationtimestamp| type| source ---|---|--- 2026-07-05 20:17:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwffn4twj2n 2026-07-20 15:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94308 2026-07-21 00:00:38+00:00| published-proof-of-concept|...
CVE-2026-14761
creationtimestamp| type| source ---|---|--- 2026-07-05 20:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpweu4lmsj24 2026-07-06 06:51:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitreb4b2b...
CVE-2025-56320
creationtimestamp| type| source ---|---|--- 2026-07-05 19:59:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwefkzkmf2j...
CVE-2025-70364
creationtimestamp| type| source ---|---|--- 2026-07-05 19:53:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwe44i5r72z...
CVE-2026-46454
creationtimestamp| type| source ---|---|--- 2026-07-05 19:37:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwd6qnra62b 2026-07-06 18:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpypo5e3fk2s 2026-07-09 03:37:51+00:00| seen|...
CVE-2026-46585
creationtimestamp| type| source ---|---|--- 2026-07-05 19:34:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwczeokzv2g 2026-07-09 03:26:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6oswb5qc2s 2026-07-16 12:00:06+00:00| seen|...
CVE-2026-46584
creationtimestamp| type| source ---|---|--- 2026-07-05 19:26:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwclugmc722 2026-07-09 03:26:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6os2pkk52w 2026-07-16 19:00:07+00:00| seen|...
CVE-2026-42527
creationtimestamp| type| source ---|---|--- 2026-07-05 19:22:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwcegqmov22 2026-07-09 03:27:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6oug5auv27 2026-07-16 19:00:11+00:00| seen|...
CVE-2026-14747
creationtimestamp| type| source ---|---|--- 2026-07-05 16:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvyykp26m2s...