72672 matches found
CVE-2026-7724
A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validaterestrictedurl of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is...
CVE-2026-34849
UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-10514
A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...
CVE-2026-9919 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3Q74-CWQ3-C724 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-47F8-F929-PRRW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6XX9-X287-3539 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2P92-92XP-PW8J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P6JH-CG8G-R46M vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9908 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9897 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6034
A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /BranchManagement/ProfitAndLossReport.php. Executing a manipulation of the argument BRANCHID can lead to cross site scripting. The attack may be launched remotely. The exploi...
CVE-2026-33637
A flaw was found in Faraday, an HTTP client library. This vulnerability allows a remote attacker to perform off-host request forgery by exploiting a protocol-relative host override when a request target is passed as a URI object. This can redirect a request from a fixed-base Faraday connection to...
CVE-2026-45750
creationtimestamp| type| source ---|---|--- 2026-06-05 19:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkvpixkry26 2026-06-05 20:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwktpurz2b 2026-06-07 02:09:27+00:00| seen|...
CVE-2026-11400
creationtimestamp| type| source ---|---|--- 2026-06-05 19:45:05+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mnkvm6erues2 2026-06-05 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkzupz5zd25 2026-06-05 22:13:08+00:00|...
CVE-2026-11401
creationtimestamp| type| source ---|---|--- 2026-06-05 19:45:05+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mnkvm6erues2 2026-06-05 21:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkzuxsny32l 2026-06-05 22:13:55+00:00|...
CVE-2026-8124
A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...
CVE-2025-14481
The Yoast SEO plugin for WordPress is vulnerable to Insecure Direct Object References in all versions up to, and including, 26.5. This is due to insufficient authorization checks in the Meta Search REST API endpoint that fail to verify post ownership. This makes it possible for authenticated...
CVE-2026-7446
A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...