CVE-2026-2787

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:21+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c 2026-02-26 13:17:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrbs2azou2n 2026-02-28 02:01:57+00:00| seen|...

CVE-2026-2777

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:18+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevqoyme27 2026-02-28 02:01:54+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t...

CVE-2026-2771

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevpneau2d 2026-02-28 02:01:51+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f...

CVE-2026-2767

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h 2026-02-28 02:01:50+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f...

CVE-2026-2766

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h 2026-02-28 02:01:49+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c 2026-03-01 00:27:17+00:00| seen|...

CVE-2026-2762

creationtimestamp| type| source ---|---|--- 2026-02-25 00:02:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y 2026-02-28 02:01:49+00:00| seen| https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c 2026-03-01 00:27:17+00:00| seen|...

PT-2026-21904

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...

JetBrains TeamCity 输入验证错误漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2025.11.3...

CVE-2026-28194: URL Redirection to Untrusted Site

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...

CVE-2026-25899

creationtimestamp| type| source ---|---|--- 2026-02-24 22:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn72vvqwp2s 2026-02-25 01:07:56+00:00| seen| https://gist.github.com/alon710/7f520ac338ee302e6bfcbcbe99b6a4cd 2026-02-25 04:49:18+00:00| seen|...

CVE-2026-26341

creationtimestamp| type| source ---|---|--- 2026-02-24 22:11:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn6qlap2e2e 2026-02-25 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfnjtkcze72r 2026-02-25 01:30:47+00:00| seen|...

CVE-2026-3131

creationtimestamp| type| source ---|---|--- 2026-02-24 21:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn5mri7pw2d...

GHSA-6V48-FCQ6-FF23 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

The CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. While RenameDAG calls core.ValidateDAGName to reject names containing path separators line 273 in dags.go, CreateNewDAG skips this validation entirely and passes user input directly...

Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory

The CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. While RenameDAG calls core.ValidateDAGName to reject names containing path separators line 273 in dags.go, CreateNewDAG skips this validation entirely and passes user input directly...

CVE-2026-27468

creationtimestamp| type| source ---|---|--- 2026-02-24 21:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4jo7vli2e 2026-02-24 21:42:57+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n 2026-02-25 09:14:33+00:00| seen|...

CVE-2025-15386

creationtimestamp| type| source ---|---|--- 2026-02-24 21:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn356nhrc2o...

CVE-2026-3105

creationtimestamp| type| source ---|---|--- 2026-02-24 20:28:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyyayknb2t 2026-02-24 20:29:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyz2eui52k 2026-02-24 22:06:59+00:00| seen|...

CVE-2026-2798

creationtimestamp| type| source ---|---|--- 2026-02-24 20:10:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmxxfxrle2f...

CVE-2026-2846

creationtimestamp| type| source ---|---|--- 2026-02-24 16:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmm7a2lxm2m...

Arbitrary Code Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...