Lucene search
+L

46074 matches found

EUVD
EUVD
added 2026/08/11 11:13 a.m.8 views

EUVD-2026-56036

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

6.5CVSS5.4AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:13 a.m.36 views

CVE-2026-72597 Friendica Friendica - Server-Side Request Forgery

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

6.5CVSS0.00201EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:12 a.m.9 views

CVE-2026-72561

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 11:12 a.m.9 views

EUVD-2026-56031

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:12 a.m.32 views

CVE-2026-72561

CVE-2026-72561 describes a broken access control in Peppermint Lab Peppermint. Through commit ba6e217, any authenticated non-administrative user can reconfigure the platform’s global OIDC/SSO settings via an unprotected configuration endpoint that performs no administrative role check before appl...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:12 a.m.34 views

CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:10 a.m.37 views

CVE-2026-72552

The CVE-2026-72552 entry concerns Dub and a server‑side request forgery (SSRF) via the metatags edge endpoint. The endpoint allows unauthenticated callers to fetch any caller‑supplied URL, enabling requests to internal or external hosts without a denylist. This could enable internal network disco...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:10 a.m.33 views

CVE-2026-72552 Dub Dub - Server-Side Request Forgery

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint. The endpoint fetches any caller-supplied URL without applying a denylist or...

7.5CVSS0.00432EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:10 a.m.10 views

CVE-2026-72552

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint. The endpoint fetches any caller-supplied URL without applying a denylist or...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/11 11:09 a.m.39 views

CVE-2026-72546 Attendize Attendize - Insecure Direct Object Reference

An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the...

7.1CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:01 a.m.82 views

CVE-2026-13739

The CVE-2026-13739 vulnerability affects a legacy Command Center endpoint, described as an unauthenticated Server-Side Request Forgery (SSRF) involving handling of arbitrary target URLs. The issue permits external control over requests initiated from the vulnerable system, with potential impact t...

8.8CVSS5.4AI score0.00339EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/11 6:17 a.m.14 views

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:31 a.m.49 views

CVE-2026-12051

The CVE affects Zephyr’s USB DFU, specifically the device_next USB device stack. In handle_download() the code dereferences buf without verifying buf is NULL during DFU_DNLOAD with no Data OUT stage (zero-length terminate). This NULL pointer dereference on the control endpoint after transitioning...

4.6CVSS5.4AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/11 5:31 a.m.25 views

CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)

The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...

4.6CVSS5.5AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/11 5:31 a.m.9 views

CVE-2026-12051

The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...

4.6CVSS5.4AI score0.00167EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/11 5:28 a.m.9 views

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS5.2AI score0.0024EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/11 5:28 a.m.171 views

CVE-2026-19516

The CVE describes SSRF in Grafana’s mcp-grafana outbound requests: a caller-supplied X-Grafana-URL header plus grafana_api_request can set HTTP method, path, and body, enabling directing requests to internal, loopback, and link-local services (including metadata endpoints) beyond the configured G...

9.1CVSS5.3AI score0.0024EPSS
SaveExploits0References1
Wolfi
Wolfi
added 2026/08/11 2:16 a.m.17 views

GHSA-5QJQ-93H5-HRGP vulnerabilities

Vulnerabilities for packages: open-webui...

5.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/08/11 12:03 a.m.9 views

SUSE CVE-2026-58427

Private org member list leaked via /members API endpoint - incomplete fix for PR 38145...

7.5CVSS5.6AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70841

OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/get users, /user/get all users uid, and /group/get groups. Attackers can explo...

7.1CVSS5.4AI score0.00238EPSS
SaveExploits0References6
Rows per page
Query Builder