124140 matches found
CVE-2026-50887
A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...
CVE-2026-50887: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...
CVE-2026-8683: Allocation of Resources Without Limits or Throttling
Mattermost Desktop App versions =6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID:...
CVE-2016-20078: Improper Control of Filename for Include/Require Statement in PHP Program
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...
PT-2026-49185
Name of the Vulnerable Software and Affected Versions WP MAPS PRO versions prior to 6.1.1 Description The plugin registers an unauthenticated AJAX action that allows the creation of an administrator account. By providing a valid nonce, which is publicly available on any frontend page that enqueue...
GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
Summary Multiple exploitable reflected cross-site scripting XSS vulnerabilities exist in the Web Interface / ssi.cgi functionality of LPC2011/LPC2211 versions: 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to...
PT-2026-49570
Name of the Vulnerable Software and Affected Versions Python-Multipart versions prior to 0.0.30 Description The QuerystringParser treated the semicolon ; as a field separator in application/x-www-form-urlencoded bodies, in addition to the ampersand &. This deviates from the WHATWG URL standard,...
CVE-2026-12190
A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment...
CVE-2026-53470
creationtimestamp| type| source ---|---|--- 2026-06-14 23:16:13+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvmpno5q2m 2026-06-15 16:31:52+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpi4b34v2k 2026-06-18 10:07:09+00:00| seen|...
CVE-2026-12190
The CVE-2026-12190 entry concerns Genspark AI Workspace App version 2.8.4 on Android, affecting the ai.mainfunc.genspark component. The issue is described as improper authorization in the handler for a custom URL scheme, with exploitation limited to a local environment. The provided documents do ...
CVE-2026-12190 Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme
A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment...
CVE-2026-49766
creationtimestamp| type| source ---|---|--- 2026-06-14 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moau3nmx7b2y 2026-06-15 21:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebgpamvg2e 2026-06-16 05:01:09+00:00| seen|...
CVE-2026-48748
creationtimestamp| type| source ---|---|--- 2026-06-14 12:04:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moaq36mskk23 2026-06-16 00:56:16+00:00| seen| https://gist.github.com/alon710/bc7929d92c51f42ce9344791ed6ca313...
CVE-2026-12190: Improper Authorization in Handler for Custom URL Scheme
A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment...
CVE-2026-12189: Improper Authorization in Handler for Custom URL Scheme
A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been...
openSUSE 16 Security Update : mariadb (openSUSE-SU-2026:20933-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20933-1 advisory. This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass bsc1259176. -...
SUSE SLES12 Security Update : mutt (SUSE-SU-2026:2300-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2300-1 advisory. This update for mutt fixes the following issues - CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. -...
CVE-2025-55651
creationtimestamp| type| source ---|---|--- 2026-06-13 22:40:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7d5f3gem2r...