65755 matches found
CVE-2026-54159
creationtimestamp| type| source ---|---|--- 2026-07-10 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqdbtxqsty2r 2026-07-18 00:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquzxtp3m724 2026-07-18 05:01:52+00:00| seen|...
CVE-2026-56675
creationtimestamp| type| source ---|---|--- 2026-07-10 23:11:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbiszh4227 2026-07-10 23:42:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd7lsx7p2s 2026-07-11 19:00:39+00:00| seen|...
CVE-2026-59193
creationtimestamp| type| source ---|---|--- 2026-07-10 23:11:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbicyild2z...
CVE-2026-57167
creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbe3sakx2d 2026-07-11 00:18:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfa5vvni2z...
CVE-2026-55669
creationtimestamp| type| source ---|---|--- 2026-07-10 23:00:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdatvtvhq26...
CVE-2026-59180
creationtimestamp| type| source ---|---|--- 2026-07-10 22:58:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdar3hpo42x...
CVE-2026-39903
creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdad5ewbv2y 2026-07-11 00:18:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf7jzsx32y...
CVE-2026-1667
creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdacfneqy2i 2026-07-11 00:14:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdezilp4u2y 2026-07-11 00:54:12+00:00| seen|...
CVE-2026-55187
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55213
creationtimestamp| type| source ---|---|--- 2026-07-10 22:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5liddlb2j...
CVE-2026-55187
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187
Mailpit contains an SSRF protection gap in Link Check API prior to v1.30.2. The internal IsInternalIP deny-list only blocks common IPv4 private/local addresses and CGNAT, and does not recognize several IPv6 forms that embed IPv4 destinations or IPv6 prefixes outside standard private ranges. Bypas...
EUVD-2026-43052
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-56279
creationtimestamp| type| source ---|---|--- 2026-07-10 21:22:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3frisgd2x 2026-07-12 07:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7y2z7525...
CVE-2026-57575
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...
CVE-2026-55665
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...