RabbitMQ: RabbitMQ: Cross-site Scripting in management UI allows arbitrary JavaScript execution

A flaw was found in RabbitMQ, a messaging and streaming broker. The RabbitMQ management user interface UI improperly handles the x-internal-purpose argument when rendering queue or exchange details. This vulnerability allows a user with permissions to declare a queue or exchange to inject and...

CVE-2026-44937

creationtimestamp| type| source ---|---|--- 2026-07-06 12:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy3l5tpj42s 2026-07-18 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqw32m2cql2y 2026-07-18 10:37:07+00:00| seen|...

CVE-2026-46588

creationtimestamp| type| source ---|---|--- 2026-07-06 12:18:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy34rfgoy2c 2026-07-06 20:03:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyv53uxcy2b 2026-07-16 12:00:05+00:00| seen|...

CVE-2026-57638

creationtimestamp| type| source ---|---|--- 2026-07-06 12:15:11+00:00| seen| https://bsky.app/profile/potato.software/post/3mpy2wtxs6s2h 2026-07-06 12:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpy2wthmb22a...

CVE-2025-29329

creationtimestamp| type| source ---|---|--- 2026-07-06 11:07:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxx55vsds2i...

CVE-2024-29004

creationtimestamp| type| source ---|---|--- 2026-07-06 11:00:06+00:00| seen| https://t.me/ZerodayAlert/249 2026-07-07 00:00:11+00:00| seen| https://t.me/ZerodayAlert/249 2026-07-11 23:00:04+00:00| seen| https://t.me/ZerodayAlert/249 2026-07-12 00:00:19+00:00| seen| https://t.me/ZerodayAlert/249...

CVE-2026-14798

creationtimestamp| type| source ---|---|--- 2026-07-06 08:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxoyfymn62b 2026-07-08 16:12:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j4raelr2d...

CVE-2026-24014

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name t...

CVE-2026-14795

creationtimestamp| type| source ---|---|--- 2026-07-06 08:31:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxogizaxf2c 2026-07-08 12:13:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq53sij2vw2w...

CVE-2026-14793

creationtimestamp| type| source ---|---|--- 2026-07-06 08:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxnvuwfqf2e 2026-07-08 12:13:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq53rwys3x2a 2026-08-06 21:31:41+00:00| seen|...

CVE-2026-11962

creationtimestamp| type| source ---|---|--- 2026-07-06 07:54:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmfeg4bb2b 2026-07-06 18:00:19+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mpyoa3zgs42k 2026-07-09 00:29:02+00:00| seen|...

CVE-2025-51629

creationtimestamp| type| source ---|---|--- 2026-07-06 06:50:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxisikupi2p...

CVE-2025-45619

creationtimestamp| type| source ---|---|--- 2026-07-06 06:18:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxgywyzrb2b...

CVE-2026-57634

creationtimestamp| type| source ---|---|--- 2026-07-06 06:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpxgt3oro42e...

CVE-2026-14803

creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...

CVE-2021-28927

creationtimestamp| type| source ---|---|--- 2026-07-06 01:58:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwyiouca52i...

CVE-2026-52747

creationtimestamp| type| source ---|---|--- 2026-07-06 00:40:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwu4jxh6o2t 2026-07-11 03:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdonhllv32z 2026-07-11 12:00:29+00:00| seen|...

CVE-2026-14772

creationtimestamp| type| source ---|---|--- 2026-07-06 00:25:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwtbphazr2b 2026-07-07 08:05:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25he6wzn2v...

CVE-2026-59519

creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...

PT-2026-55880

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 1.3.3 through 2.0.7 Description The internal RPC interface of the Apache IoTDB DataNode used for creating Trigger instances fails to sufficiently validate the name of the uploaded Trigger JAR when constructing a file path...