65442 matches found
PT-2026-61829
Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35 Description An issue exists in the internal Access Control List ACL subsystem. When the framework is configured to manage dynamic links to accept network traffic from any IP address without network payload...
The vulnerability of the URL processor for web interfaces in the microprogramming software for D-Link DNS-320 network storage devices allows a perpetrator to cause a service failure.
The vulnerability of the URL processor in the web interface of the D-Link DNS-320 network storage microprogramming system is related to errors in access control when processing the File parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2026-57495
creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...
CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...
CVE-2026-16327
The CVE-2026-16327 entry concerns D-Link DNS-320 firmware 1.0.2 where the /web/web_file/upload.php upload handling is vulnerable. Manipulating the File argument enables unrestricted file upload, with the attack executable remotely. The exploit has been publicly disclosed. No further remediation d...
CVE-2026-55544
creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fkeqfif2u...
CVE-2026-55668
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:33+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-8wc8-hf36-mjh9...
CVE-2026-56833
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c...
CVE-2026-56835
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:12+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr...
CVE-2026-56838
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg...
CVE-2026-57122
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...
CVE-2026-57136
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vjv9-7m7j-h833...
CVE-2026-57138
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:02+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp...
CVE-2026-47130
creationtimestamp| type| source ---|---|--- 2026-07-20 22:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cfts2ly27...
CVE-2026-64626 AVideo Encoder downloadURL SSRF via unpinned retry fallback
AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...
CVE-2026-13380
creationtimestamp| type| source ---|---|--- 2026-07-20 21:46:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4bep6swv2r...
GHSA-8C25-4J27-2RV3 Mistune: XSS via percent-encoded javascript URI bypass in safe_url()
Summary An XSS vulnerability in Mistune allows bypassing of safeurl protections via percent-encoded javascript URIs. Details The vulnerability exists in HTMLRenderer.safeurl in Mistune. The function is intended to block harmful URL schemes such as "javascript:" by checking the prefix of the...
CVE-2026-58624
creationtimestamp| type| source ---|---|--- 2026-07-20 21:25:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr4a743w7m25 2026-07-20 22:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eyfbiel2e...