50362 matches found
VulnCheck KEV: CVE-2026-59800
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint this route is not covered by the dashboard middleware matcher, so no authorization check is applied. The sudoPassword field from the request body is written to t...
PT-2026-56149
Name of the Vulnerable Software and Affected Versions WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell versions prior to 3.12.8 Description Unauthenticated attackers can achieve Remote Code Execution by sending unsanitized values through the postData parameter. The plug...
CVE-2026-55078: Improper Handling of Highly Compressed Data (Data Amplification)
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, POST /api/v2/files converts zip uploads to tar in memory via CreateTarFromZip, which enforced a per-entry size limit but no...
PT-2026-56214
Name of the Vulnerable Software and Affected Versions New API versions prior to 0.12.0-alpha.1 Description The email and WeChat account binding endpoints use GET requests for state-changing account operations. In deployments where session cookies are sent on cross-site navigations, an attacker ca...
PT-2026-105495
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...
CVE-2026-59707: Server-Side Request Forgery (SSRF)
LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper...
CVE-2026-54601: Improperly Controlled Modification of Dynamically-Determined Object Attributes
FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/create/reTrainingCollection in a way that persists a server-owned datasetId value from another tenant. This creates mixe...
PT-2026-56135
Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471 Description An authenticated user can inject additional shell statements that execute on the remote server during deployment. This occurs because pre-deployment and post-deployment commands are...
Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport
Summary An unauthenticated remote attacker can force any MCP Ruby SDK server using MCP::Server::Transports::StreamableHTTPTransport to allocate gigabytes of memory by sending a single oversized JSON-RPC POST. The transport reads the entire HTTP body into a Ruby String and parses it with...
CVE-2025-68052
creationtimestamp| type| source ---|---|--- 2026-07-06 23:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpz7t2bl2m2n...
CVE-2023-22886
creationtimestamp| type| source ---|---|--- 2026-07-06 23:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpz7eoby722b...
CVE-2026-41899
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, POST /api/feedback has no authentication, no rate limiting, and no input validation, allowing arbitrary content to be forwarded directly to a Discord webhook and enabling...
CVE-2026-54496
creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fiw6dh2r 2026-07-17 19:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquibd7ypf22 2026-07-19 08:00:58+00:00| seen|...
CVE-2026-34038
creationtimestamp| type| source ---|---|--- 2026-07-06 21:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz22rxij323 2026-07-07 18:02:15+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mq36shckli2n 2026-07-08 11:48:08+00:00| seen|...
CVE-2026-54769
creationtimestamp| type| source ---|---|--- 2026-07-06 21:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz22qfgd22g 2026-07-06 22:35:25+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc 2026-07-10...
GHSA-5493-9M76-2QRR
creationtimestamp| type| source ---|---|--- 2026-07-06 21:31:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpz22a66p72b...
CVE-2026-55727
creationtimestamp| type| source ---|---|--- 2026-07-06 21:28:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzuzlayu2c...
CVE-2025-53831
creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...
EUVD-2026-41951
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, POST /api/feedback has no authentication, no rate limiting, and no input validation, allowing arbitrary content to be forwarded directly to a Discord webhook and enabling...