991065 matches found
CVE-2026-45123
MyBB (open-source forum software) versions prior to 1.8.40 are affected by a server-side request forgery (SSRF) vulnerability in the remote requests feature. The root cause is a fail-open verification in fetch_remote_file() within inc/functions.php: the function get_ip_by_hostname() does not retu...
CVE-2026-45123
MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side request forgery vulnerability. The default disallowed remote hosts list does not include IPv6 addresses. Verification in fetchremotefile...
CVE-2026-45123 MyBB: IPv6 SSRF
MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side request forgery vulnerability. The default disallowed remote hosts list does not include IPv6 addresses. Verification in fetchremotefile...
CVE-2026-45123 MyBB: IPv6 SSRF
MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side request forgery vulnerability. The default disallowed remote hosts list does not include IPv6 addresses. Verification in fetchremotefile...
CVE-2026-63632
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...
ANT-2026-BVDWY3J9 · supabase/auth · open-redirect
open-redirect medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BVDWY3J9: Redirect allow-list ignores URL scheme and port In supabase/auth, IsRedirectURLValid...
ANT-2026-EFRBDRNP · supabase/supabase · open-redirect
open-redirect low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-EFRBDRNP: Unvalidated returnTo redirect after organisation creation In Supabase Studio's NewOrgForm...
CVE-2026-75783
creationtimestamp| type| source ---|---|--- 2026-08-18 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mted75q54k2x 2026-08-18 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117116752787430828...
CVE-2026-45532
DataEase versions prior to 2.10.23 on Windows have a path traversal flaw: the server only filters /, allowing attackers to traverse directories via \. The fix is in v2.10.23; no workarounds exist. CVSS 4.0 scores 8.7 (HIGH) with network access and no authentication required. No exploitation detai...
CVE-2026-73499
A flaw was found in etcd, a distributed key-value store. A user with READ permission on a single key can bypass authorization checks in the Watch gRPC API by using open-ended range requests. This allows them to receive watch events for keys beyond their authorized scope, leading to information...
CVE-2026-75833
The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...
nightingale v9.1.1
Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...
webpack-dev-server CVE-2026-14620 open-editor CSRF detect
Detects CVE-2026-14620 in webpack-dev-server = 5.2.5: cross-site GET /webpack-dev-server/open-editor?fileName= reaches launchEditor. Probes cors and no-cors Sec-Fetch combinations; vulnerable when cors cross-site returns HTTP 200 while no-cors cross-site is blocked 403. !/usr/bin/env python3 --...
webpack-dev-server CVE-2026-14620 open-editor CSRF check
CVE-2026-14620 GHSA-f5vj-f2hx-8m93: webpack-dev-server = 5.2.5 allows cross-site requests to GET /webpack-dev-server/open-editor?fileName=, which calls launchEditor and can spawn an editor on an attacker-chosen path. The CVE-2026-6402 guard only blocks no-cors subresources; cross-site navigations...
CVE-2026-75833 Grav API Plugin Open Redirect via Backslash Bypass
The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...
CVE-2026-75833 Grav API Plugin Open Redirect via Backslash Bypass
The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...
CVE-2026-75833
The Grav API plugin (bundled with Grav 2.0's admin-next/API stack) before version 1.0.14 has an open redirect in SsoController::sanitizeReturnTo(): a backslash-prefix like /\evil.com bypasses the // guard and is normalized by browsers to //evil.com, enabling post-OAuth-login phishing. Exploitatio...
CVE-2026-75833
The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...
EUVD-2026-60597
The Grav API plugin getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack before version 1.0.14 contains an open redirect weakness in SsoController::sanitizeReturnTo. The function rejects a literal '//' prefix but does not account for browsers normalizing backslashes to slashes in...
