23691 matches found
RAGAS has SSRF via Multi-Modal Faithfulness Collections Module
A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...
CVE-2026-57408 WordPress Peach Payments Gateway plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Peach Payments Gateway: from n/a through = 4.0.2...
CVE-2026-15526
creationtimestamp| type| source ---|---|--- 2026-07-13 07:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqj762fozp2w 2026-07-13 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15526...
CVE-2026-15497 SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/controller/controller/ExchangeController.java of the component JWT Authentication Filter. This manipulation causes code...
CVE-2026-15477 Bahmni bahmnicore Search Endpoint sql additionalParams sql injection
A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...
CVE-2025-30007
creationtimestamp| type| source ---|---|--- 2026-07-11 01:12:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi7uvrzi27 2026-07-11 18:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfald7t3g2j 2026-07-14 04:51:33+00:00| seen|...
CVE-2026-39245
creationtimestamp| type| source ---|---|--- 2026-07-11 00:35:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg6bv4xc2i 2026-07-13 16:17:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk3qeflq22e...
CVE-2026-55843
creationtimestamp| type| source ---|---|--- 2026-07-10 20:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcx6o6zfz2g 2026-07-11 01:01:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhmz3k6w2f 2026-08-29 01:28:38+00:00| seen|...
CGA-352Q-39G9-98WW
Bulletin has no description...
CVE-2026-54798
creationtimestamp| type| source ---|---|--- 2026-07-09 16:47:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3kptfir27 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-16 16:15:03+00:00| seen|...
CGA-8R2C-XXW6-2FR7
Bulletin has no description...
CVE-2026-59691
creationtimestamp| type| source ---|---|--- 2026-07-09 12:15:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7menybku26...
CVE-2026-49471
creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10 2026-07-08 22:35:03+00:00| published-proof-of-concept| https://github.com/oraios/serena/security/advisories/GHSA-37h2-6p4f-mp3q 2026-07-11 00:42:25+00:00|...
CVE-2026-59938 pypdf: Possible large memory usage for wrong image dimensions
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0...
CVE-2026-57247
creationtimestamp| type| source ---|---|--- 2026-07-08 12:09:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq53l3gx5i2x...
CVE-2026-57172
creationtimestamp| type| source ---|---|--- 2026-07-07 23:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3r323sfn2i...
CVE-2026-53644
creationtimestamp| type| source ---|---|--- 2026-07-07 00:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcoa7h4v23...
CVE-2026-14771 SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown function of the file /editexam1.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-58423
creationtimestamp| type| source ---|---|--- 2026-07-04 02:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpryeskfqn2z 2026-07-04 16:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mptgmukpmg2o 2026-07-04 16:01:06+00:00| seen|...