67874 matches found
CVE-2026-54022 Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs b...
EUVD-2026-38506
A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. A low‑privileged user could exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the script a...
CVE-2026-4610
creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...
EUVD-2026-38477
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged-in user visited the chat URL, the...
CVE-2026-54302
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged-in user visited the chat URL, the...
CVE-2026-54302
CVE-2026-54302 — n8n: Stored XSS in Chat Trigger Node . An authenticated user with workflow edit access could inject JavaScript into the Chat Trigger page by setting a malicious webhookId. When a logged-in user visited the chat URL, the code executed in the n8n origin under that user’s session. A...
CVE-2026-54302 n8n: Stored XSS in Chat Trigger Node
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged-in user visited the chat URL, the...
CVE-2026-56695
OpenHarness ohmo gateway exposed by default to remote invocation via /resume and /summary, enabling attackers to enumerate and load arbitrary session snapshots by ID. This can grant access to private prompts, credentials, tool output, and file paths through shared gateway channels. Documented imp...
CVE-2026-56402
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response...
CVE-2026-56402 NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response...
SUSE-SU-2026:22349-1 Security update for sg3_utils
This update for sg3utils fixes the following issues: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823 - rescan-scsi-bus.sh: quote $idserial in findmultipath call bsc1268201...
OPENSUSE-SU-2026:21040-1 Security update for sg3_utils
This update for sg3utils fixes the following issues: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823 - rescan-scsi-bus.sh: quote $idserial in findmultipath call bsc1268201...
JLSEC-2026-619 CR/LF injection in server-sent events (SSE) fields in HTTP.jl
Description The server-side SSE serializer wrote the single-line fields event, id, and retry verbatim to the text/event-stream wire with no CR/LF filtering, and split the multi-line data field only on \n, ignoring a bare \r that is also a valid SSE line terminator. The SSEEvent constructor...
MINI-RW6F-9G6Q-59FJ
Bulletin has no description...
CVE-2026-48875
creationtimestamp| type| source ---|---|--- 2026-06-23 10:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mox66eggyl2b...
GHSA-VM85-HXW5-5432 vulnerabilities
Vulnerabilities for packages: nextcloud-server, privatebin, drupal...
CVE-2026-9733
creationtimestamp| type| source ---|---|--- 2026-06-23 08:04:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mowwurvmxt2r...
CVE-2026-55655
creationtimestamp| type| source ---|---|--- 2026-06-23 08:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwprsilu2l 2026-06-28 18:41:10+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpemrrslna2p 2026-06-28 18:41:12+00:00| seen|...
CVE-2026-56410
A flaw was found in libexpat. Specifically, the xmlwf utility contains an integer overflow vulnerability in its resolveSystemId function. This flaw could be exploited by an attacker to potentially gain unauthorized access to sensitive information or execute arbitrary code, leading to a compromise...
