CVE-2026-42597

creationtimestamp| type| source ---|---|--- 2026-04-30 19:11:57+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-g924-cjx7-2rjw 2026-05-14 17:44:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltemomcod2q...

CVE-2026-41404

creationtimestamp| type| source ---|---|--- 2026-04-30 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkqcptrocq2s...

CVE-2026-36960

creationtimestamp| type| source ---|---|--- 2026-04-30 17:43:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62foz5v2n...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the FilterDeadline function. An attacker can force the application to make arbitrary outbound HTTP POST requests to internal or external destinations by supplying a crafted URL in the...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the FilterDeadline function. An attacker can force the application to make arbitrary outbound HTTP POST requests to internal or external destinations by supplying a crafted URL in the...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the FilterDeadline function. An attacker can force the application to make arbitrary outbound HTTP POST requests to internal or external destinations by supplying a crafted URL in the...

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL

CVE Report — Unauthenticated SSRF via Unfiltered Webhook URL in Gotenberg Severity | Field | Value | |-----------|----------------------------------------| | CVSS v3.1 | 8.6 High | | Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N | | CWE | CWE-918 — Server-Side Request Forgery | | Auth | None |...

CVE-2022-50993

Weaver Fanwei E-office versions prior to 10.020221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types...

CVE-2026-7500

creationtimestamp| type| source ---|---|--- 2026-04-30 16:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq3ir5gey2p...

CVE-2022-50993

Weaver Fanwei E-office versions prior to 10.020221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types...

CVE-2026-7402

creationtimestamp| type| source ---|---|--- 2026-04-30 15:18:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkpvxf2wup2g 2026-04-30 16:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq26wa6wo2e 2026-04-30 16:48:48+00:00| seen|...

CVE-2026-2892

creationtimestamp| type| source ---|---|--- 2026-04-30 15:18:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkpvww7iqe2c 2026-04-30 16:23:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkpzllnuqo2w 2026-04-30 16:41:49+00:00| seen|...

CVE-2025-14956

creationtimestamp| type| source ---|---|--- 2026-04-30 14:51:35+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkpugsdfoc2s...

CVE-2026-0206

creationtimestamp| type| source ---|---|--- 2026-04-30 13:55:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkprcb5i6n2c 2026-05-01 02:58:40+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mkr52zptik2e 2026-07-21 04:00:07+00:00| seen|...

CVE-2026-40685

creationtimestamp| type| source ---|---|--- 2026-04-30 13:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkpqz242uz27 2026-05-02 04:40:22+00:00| seen| https://vulnerability.circl.lu/bundle/1f150b5f-d6d1-40b6-94cc-7bd855a097ec 2026-05-25 20:02:12+00:00| seen|...

CVE-2026-4873

A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection via IMAP, SMTP, or POP3 and then making a subsequent request to the same host that requires Transport Layer Security TLS. Due to incorrect connection reuse, the subsequent request would bypass t...

CVE-2026-41016

creationtimestamp| type| source ---|---|--- 2026-04-30 13:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkppic632k2v...

CVE-2026-6498

creationtimestamp| type| source ---|---|--- 2026-04-30 13:07:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkpongq2rg2p 2026-05-08 10:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mldjq3g6bt2c...

CVE-2026-42320

creationtimestamp| type| source ---|---|--- 2026-04-30 09:22:42+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mkpc2tdur22j 2026-05-07 16:00:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-05-19 12:15:24+00:00| seen|...

CVE-2025-31431

creationtimestamp| type| source ---|---|--- 2026-04-30 06:58:23+00:00| seen| https://bsky.app/profile/c3iq.bsky.social/post/3mkozyr5fdk2p 2026-04-30 10:10:52+00:00| seen| https://bsky.app/profile/mlf.one/post/3mkpeqxzers2z 2026-05-01 02:30:28+00:00| seen|...