40358 matches found
CVE-2025-59362
creationtimestamp| type| source ---|---|--- 2026-04-12 16:17:16+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjcqthmbgs2h...
[SECURITY] Fedora 42 Update: libmicrohttpd-1.0.3-1.fc42
GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...
[SECURITY] Fedora 43 Update: libmicrohttpd-1.0.3-1.fc43
GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...
Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php
Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using...
CVE-2026-28291
creationtimestamp| type| source ---|---|--- 2026-04-12 15:13:14+00:00| published-proof-of-concept| https://github.com/steveukx/git-js/security/advisories/GHSA-jcxm-m3jx-f287 2026-04-13 18:19:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfi5dfcmd2w 2026-04-13...
CVE-2019-25689
creationtimestamp| type| source ---|---|--- 2026-04-12 14:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckxhm7h72z 2026-06-07 18:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnpr3kvhh32m...
CVE-2019-25695
creationtimestamp| type| source ---|---|--- 2026-04-12 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckm4ahhg2r...
CVE-2019-25703 ImpressCMS 1.3.11 SQL Injection via bid Parameter
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL...
EUVD-2026-21715
A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...
CVE-2026-6119
A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...
Server-side Request Forgery (SSRF)
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the postdata.get function of the API Endpoint component. An attacker can access internal resources or perform unauthorized requests by sending crafted requests to...
CVE-2026-6119
A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...
CVE-2026-6119 AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery
A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...
CVE-2026-6119
CVE-2026-6119 affects AstrBotDevs AstrBot up to version 4.22.1. The vulnerability is in the API Endpoint’s post_data.get function, enabling server-side request forgery (SSRF) and potentially allowing remote exploitation. Public exploits are noted, with PoC activity observed. The issue is acknowle...
CVE-2026-6119 AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery
A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...
CVE-2019-25712
creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25712 2026-04-12 14:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclothsug2m...
CVE-2019-25710
creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25710 2026-04-12 15:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmsntnnf2o 2026-04-17 15:07:08+00:00| seen|...
CVE-2019-25705
creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25705 2026-04-12 14:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckcqao5n23 2026-06-07 03:07:07+00:00| seen|...
CVE-2019-25708
creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25708 2026-04-12 14:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclfuwc5p2g...
CVE-2019-25703
creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25703 2026-04-12 14:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjts3lda2r...