124173 matches found
CVE-2026-44917
creationtimestamp| type| source ---|---|--- 2026-06-04 07:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh375hxla2d...
CVE-2026-38967
creationtimestamp| type| source ---|---|--- 2026-06-04 06:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngx3fkdes2p...
CVE-2026-10783
creationtimestamp| type| source ---|---|--- 2026-06-04 01:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngh7z7r5x2p...
PT-2026-46226
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A URL validation flaw in the dashboard button widget allows a crafted relative-looking URL to be accepted as a local path while browsers interpret it as an external URL. The validation process...
PT-2026-46304
Name of the Vulnerable Software and Affected Versions WebOb versions prior to 1.8.10 Description An open redirect occurs when the software normalizes the HTTP Location header to include the request hostname. The process involves parsing the redirect URL using Python's urllib.parse and joining it ...
MISP security vulnerabilities
MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes features for analyzing threats to network security and malware analysis. MISP has a security vulnerability, which...
GNCC GP5 encryption issue vulnerabilities
GNCC GP5 is a 2K indoor security camera produced by GNCC Corporation. The GNCC GP5 v7.1.76 version contains a security vulnerability. This vulnerability stems from the practice of storing the pre-signed Backblaze B2 upload URL as plain text in the serial console. This could allow physically...
CVE-2026-45739: Exposure of Sensitive Information to an Unauthorized Actor
Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser URL query string. If a user entered a sensitive header, such as Authorization: Bearer , the value...
CVE-2026-10861: URL Redirection to Untrusted Site
An open redirect vulnerability existed in MISP UsersController::routeafterlogin because the value stored in the preloginrequestedurl session key was used as the post-login redirect destination without sufficiently enforcing that it was a local application path. An unauthenticated remote attacker...
CVE-2026-10856: URL Redirection to Untrusted Site
A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a local path while being interpreted by browsers as an external URL. The validation rejected URLs containing an explicit scheme, host, or user component, but did not reject paths...
CVE-2019-25735: Buffer Copy without Checking Size of Input
AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code...
PT-2026-46227
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An open redirect occurs in the routeafterlogin function of the UsersController because the value stored in the pre login requested url session key is used as the post-login redirect destination...
PT-2026-46889
Name of the Vulnerable Software and Affected Versions Shopware versions prior to 6.6.10.18 Shopware versions prior to 6.7.10.1 Description Authenticated admin users can perform Server-Side Request Forgery SSRF via the '/api/ action/media/external-link' endpoint. The issue stems from an...
Linux Distros Unpatched Vulnerability : CVE-2026-10805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed...
Keycloak URL Validator Information Disclosure
The vulnerability of the URL validator in the Keycloak identity and access management software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
GHSA-6VR3-7WCX-V5G5
creationtimestamp| type| source ---|---|--- 2026-06-03 22:40:56+00:00| seen| https://gist.github.com/alon710/0a4fd57da163f29a224f9f12ea16fb50...
CVE-2026-10771
A vulnerability was found in crmeb crmebjava 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request...
CVE-2026-44682
creationtimestamp| type| source ---|---|--- 2026-06-03 21:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng2zcb7rm2s...
CVE-2026-10771
A vulnerability was found in crmeb crmebjava 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request...