124171 matches found
CVE-2026-9548
creationtimestamp| type| source ---|---|--- 2026-06-04 13:20:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpnwevta2j...
CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
EUVD-2026-34262
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
CVE-2026-10856
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
CVE-2026-10856 Open redirect in MISP dashboard button widget URL handling
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
EUVD-2026-32016
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks...
GHSA-86QP-5C8J-P5MR Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Summary In affected versions, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the pa...
CVE-2026-50224
creationtimestamp| type| source ---|---|--- 2026-06-04 11:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhjzfg6px2x...
CVE-2026-50225
creationtimestamp| type| source ---|---|--- 2026-06-04 11:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhimmvm3s2b...
CVE-2026-47320
creationtimestamp| type| source ---|---|--- 2026-06-04 11:06:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhi6a6h2j2k...
CVE-2026-49510
creationtimestamp| type| source ---|---|--- 2026-06-04 11:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhyb3bfo22...
CVE-2026-10800
creationtimestamp| type| source ---|---|--- 2026-06-04 10:59:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhsuz3at24...
CVE-2026-47319
creationtimestamp| type| source ---|---|--- 2026-06-04 10:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhjizpk72x...
CVE-2026-50213
creationtimestamp| type| source ---|---|--- 2026-06-04 10:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgxfu2cx22...
CVE-2026-50211
creationtimestamp| type| source ---|---|--- 2026-06-04 10:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgrli5m32d 2026-06-04 19:56:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116693597828292612...
CVE-2026-48597
Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...
CVE-2026-10597
creationtimestamp| type| source ---|---|--- 2026-06-04 07:15:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh3ax372k2k...