CVE-2019-25752

creationtimestamp| type| source ---|---|--- 2026-06-19 19:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo3tltjt42z...

CVE-2019-25753

creationtimestamp| type| source ---|---|--- 2026-06-19 19:26:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo34aofex2h...

CVE-2026-49345

CVE-2026-49345 affects Mercator before 2025.05.19. The SSRF flaw resides in the CVE configuration panel (/admin/config/parameters) where ConfigurationController.testProvider() passes user input directly to curl_init() without validating scheme/host/IP. An authenticated user with configure permiss...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2026-12726 Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2026-12726

AWX/AUTOMATION-CONTROLLER GitHub webhook integration vulnerability (CVE-2026-12726): processing of GitHub pull_request webhooks stores statuses_url from the payload without validating it points to a trusted GitHub API endpoint. If a job template uses a GitHub Personal Access Token as the webhook ...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

EUVD-2026-38065

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

CVE-2019-25748

creationtimestamp| type| source ---|---|--- 2026-06-19 18:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monyikgprg2k...

CVE-2017-20277

creationtimestamp| type| source ---|---|--- 2026-06-19 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxfyu6sh2m...

CVE-2017-20271

creationtimestamp| type| source ---|---|--- 2026-06-19 18:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monx7bs5ih2g...

CVE-2026-56208

creationtimestamp| type| source ---|---|--- 2026-06-19 18:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwzcdtp32g 2026-07-03 18:39:31+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6zgm4al2z...

CVE-2017-20276

creationtimestamp| type| source ---|---|--- 2026-06-19 18:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwoylnca2g...

CVE-2026-56210

creationtimestamp| type| source ---|---|--- 2026-06-19 17:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvskb57d2x...

CVE-2026-56211

creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...

CVE-2007-5722

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6792df86-691e-4a71-8d28-00ccfbafdf49 2026-06-23 14:04:18+00:00| exploited|...

GHSA-Q7J3-V8QV-22VQ OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL

Impact Possible data exposure. Summary While downloading packages from a maliciously crafted URL, some git operations against that URL could allow arbitrary file read. This might allow disclosure of confidential information. Details OpenTofu relies on go-getter for downloading packages like...

CVE-2017-20269 Joomla! Component KissGallery 1.0.0 SQL Injection

Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...

CVE-2017-20269

Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...