9381 matches found
CVE-2026-67448 Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)
Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while Go's ServeMux routes using the percent-decoded URL path, and server/websockets/client.go configures...
Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication
Summary The init guard middleware in Qinglong only checks /api/user/init paths but not /open/user/init, which is whitelisted from JWT authentication and rewritten to /api/user/init after the guard has already passed, allowing unauthenticated admin credential reset on initialized instances. Affect...
CVE-2026-54136
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/workspace/scripts/listsearch. The route-level scope middleware...
CVE-2026-58436
A flaw was found in Gitea. An unauthenticated remote attacker could exploit a quadratic-time algorithm in the ParseAcceptLanguage function, specifically within the Locale middleware. This vulnerability allows an attacker to send specially crafted requests, leading to excessive resource consumptio...
PT-2026-79135
An issue in code100xDevs 100xdevs CMS v.1.0 2026-04-30 allows a remote attacker to obtain sensitive information via the src/middleware.ts, and src/app/api/mobile/search/route.ts components...
CVE-2026-52021
100xdevs CMS v1.0 (by code100xDevs) contains an information disclosure vulnerability in the src/middleware.ts and src/app/api/mobile/search/route.ts components, allowing a remote, unauthenticated attacker to obtain sensitive information with no user interaction required. The vulnerability is rate...
CVE-2026-62596
creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 16:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtr6btuxsi23...
CVE-2026-70910
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70946
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70724
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70950
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62471
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61273
creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60413
creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70675
creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:40+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71111
creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61231
creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...
CVE-2026-44256
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.4.0 until 4.14.6 and 5.0.0-beta2, api/api/middlewares.py decodes the Basic authentication username before credential validation and passes it to the access logger without neutralizing control...