50252 matches found
CVE-2026-59725
Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...
CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion
Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...
CVE-2026-59725
CVE-2026-59725 affects Socket.IO’s Engine.IO polling transport (versions 4.1.0–6.6.6). The root cause is that invalid binary POST requests with Content-Type: application/octet-stream are not properly closing the HTTP response, enabling unauthenticated attackers to exhaust server-side connections ...
CVE-2026-59725 Socket.IO: Engine.IO Polling Transport Connection Exhaustion
Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...
CVE-2018-20613
creationtimestamp| type| source ---|---|--- 2026-07-08 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5h5ttrao27...
CVE-2026-15062
creationtimestamp| type| source ---|---|--- 2026-07-08 15:24:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5ggkcovk2z 2026-07-08 17:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nauymdu2k 2026-08-05 19:48:47+00:00| seen|...
CVE-2026-59702 repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
EUVD-2026-42298
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-59702
Summary: CVE-2026-59702 affects repomix. A server-side request forgery exists in POST /api/pack, where unauthenticated attackers can cause the server to fetch arbitrary URLs without proper validation. The endpoint accepts http://, https://, and file:// URLs and passes them to git clone, enabling ...
GHSA-W54J-7WPM-CRHJ
creationtimestamp| type| source ---|---|--- 2026-07-08 14:44:37+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e7yeusk2s...
CVE-2019-10663
creationtimestamp| type| source ---|---|--- 2026-07-08 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5dskju6a2g...
CVE-2026-56360
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...
CVE-2026-54061
creationtimestamp| type| source ---|---|--- 2026-07-08 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5cjezgt22z 2026-08-20 17:50:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsocbdbj2y 2026-08-20 18:35:03+00:00| published-proof-of-concept|...
CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...
CVE-2019-10660
creationtimestamp| type| source ---|---|--- 2026-07-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5ahbcwux2s...
CVE-2026-6818
creationtimestamp| type| source ---|---|--- 2026-07-08 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq57bpuwyo2p...
CVE-2026-57260
creationtimestamp| type| source ---|---|--- 2026-07-08 12:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq54c2bmsp26...
CVE-2025-14785
creationtimestamp| type| source ---|---|--- 2026-07-08 12:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq53wgqbtu2o 2026-07-09 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mq7ke5ocv22b...