CVE-2026-12787

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...

EUVD-2026-38151

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...

CVE-2024-8806

creationtimestamp| type| source ---|---|--- 2026-06-21 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mornpcbldq2a...

Server-side Request Forgery (SSRF)

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /v1/mcp/test/connection endpoint. An attacker can perform server-side request forgery SSRF by supplying a crafted tokenurl and...

PT-2026-51258

Name of the Vulnerable Software and Affected Versions kortix-ai suna versions prior to 0.8.39 Description A weakness in the Auth Endpoint component allows for remote cross-site scripting XSS, which is a technique where malicious scripts are injected into trusted websites. The issue exists within...

CVE-2026-12813: Server-Side Request Forgery (SSRF)

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be...

CVE-2026-56228

creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...

CVE-2026-77111

creationtimestamp| type| source ---|---|--- 2026-06-20 20:32:39+00:00| seen| https://gist.github.com/elbakouchisamira61-bit/5d6b526ef00d36ec0158cd86cca2f16e 2026-09-11 19:18:21+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mvbbtcnejy2d 2026-09-12 01:37:07+00:00| seen|...

CVE-2026-56330

creationtimestamp| type| source ---|---|--- 2026-06-20 20:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqp2fi5lq22 2026-06-21 13:11:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116788263084343961...

CVE-2026-56342

creationtimestamp| type| source ---|---|--- 2026-06-20 20:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqoozz66m22...

CVE-2026-56304

creationtimestamp| type| source ---|---|--- 2026-06-20 20:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqok5jmtt2f...

CVE-2026-56282

creationtimestamp| type| source ---|---|--- 2026-06-20 20:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqo23tp4i2w...

CVE-2025-71379

creationtimestamp| type| source ---|---|--- 2026-06-20 20:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqnpdswz622...

CVE-2026-56332

creationtimestamp| type| source ---|---|--- 2026-06-20 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqn5gwuvf2w...

CVE-2026-56276

creationtimestamp| type| source ---|---|--- 2026-06-20 19:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqmuihsev2i...

CVE-2026-56342

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2019-25763

creationtimestamp| type| source ---|---|--- 2026-06-20 15:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7z4l7zk2b...

CVE-2026-56332 Capgo - Open Redirect via confirmation_url Parameter

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmationurl parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting...