2891521 matches found
EUVD-2026-55225
A server-side request forgery SSRF vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to...
CVE-2026-72578 FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher
A cross-site request forgery CSRF vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator...
CVE-2026-72575
An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer in server/permission/permission.go return tr...
EUVD-2026-55231
An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer in server/permission/permission.go return tr...
CVE-2026-72570 cube-root directory-serve - Stored Cross-Site Scripting via Malicious Filename
A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...
EUVD-2026-55236
A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...
CVE-2026-72564 fosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication
An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource...
CVE-2026-71392
creationtimestamp| type| source ---|---|--- 2026-08-10 10:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/enijmvsyiaud2 2026-08-10 12:45:15+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-71391...
CVE-2026-61899
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899 Apache Tapestry: Possible classpath file download through URL manipulation
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899
CVE-2026-61899 affects tapestry-core (Apache Tapestry 5.5.0+) on all platforms. The issue allows an attacker to download classpath assets via specially crafted URLs, due to a vulnerability in tapestry-core. Impact is described as high with network exploitability and no user interaction. The recom...
ROOT-OS-ALPINE-322-CVE-2026-8932 CVE-2026-8932 in curl - Patched by Root
Root has patched CVE-2026-8932 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-5773 CVE-2026-5773 in curl - Patched by Root
Root has patched CVE-2026-5773 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root
Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root
Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root
Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root
Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...