123266 matches found
CVE-2026-11397 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpieimportuploadfilefromurl AJAX action. The plugin's URL downloader first calls wpsaferemoteget which correctly blocks private/reserved IP ranges, but wh...
CVE-2026-11397 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpieimportuploadfilefromurl AJAX action. The plugin's URL downloader first calls wpsaferemoteget which correctly blocks private/reserved IP ranges, but wh...
CVE-2025-69132
creationtimestamp| type| source ---|---|--- 2026-07-03 03:28:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppm4ijrkz2y...
CVE-2026-12960
An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...
CVE-2026-13050
creationtimestamp| type| source ---|---|--- 2026-07-03 02:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjvl2taw2s 2026-07-03 18:56:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7xwm3m52k...
CVE-2026-13728
creationtimestamp| type| source ---|---|--- 2026-07-03 02:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppjplxoob2s 2026-07-03 18:56:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7x6yb642b...
CVE-2026-13084
creationtimestamp| type| source ---|---|--- 2026-07-03 02:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppi32kisz2o 2026-07-03 18:55:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7vly4kv2k...
CVE-2026-12960
CVE-2026-12960 affects the ASUS Router Android app. The issue is an Improper Export of Android Application Components, where a local third-party app on the same device can send a crafted Intent that causes the ASUS Router App to open a specified URL. CVSS metrics indicate local access, low comple...
CVE-2026-12960
An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...
CVE-2026-12960
An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...
CVE-2026-57671
creationtimestamp| type| source ---|---|--- 2026-07-03 00:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcg77jh522...
CVE-2026-57674
creationtimestamp| type| source ---|---|--- 2026-07-03 00:33:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppccmtr7a2i 2026-07-31 05:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrwaqp4st42q...
CVE-2026-58467
creationtimestamp| type| source ---|---|--- 2026-07-03 00:03:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaogi76s2i 2026-07-03 15:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtbel3yw2j 2026-09-22 09:00:05+00:00| confirmed|...
CVE-2026-12960: Improper Export of Android Application Components
An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App ' section on the ASUS...
CVE-2026-27779: Improper Access Control
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
CVE-2026-25779: URL Redirection to Untrusted Site
Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirectto values...
CVE-2026-59094
creationtimestamp| type| source ---|---|--- 2026-07-02 23:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp7cwzdsd2s 2026-07-03 15:10:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtd5su7o2j...
CVE-2026-8482
creationtimestamp| type| source ---|---|--- 2026-07-02 22:23:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp33iarsq22 2026-07-03 03:25:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplws66tk2q...
Server-side Request Forgery (SSRF)
Overview @lobehub/lobehub is a LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...