40375 matches found
CVE-2026-40114 PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /api/v1/runs endpoint accepts an arbitrary webhookurl in the request body with no URL validation. When a submitted job completes success or failure, the server makes an HTTP POST request to this URL using httpx.AsyncClient. An...
CVE-2026-40114
PraisonAI's /api/v1/runs accepts an arbitrary webhook_url in requests and, before version 4.5.128, posts results to that URL after job completion using httpx.AsyncClient. This enables SSRF from an unauthenticated attacker to reach internal or external destinations, including cloud metadata servic...
CVE-2026-5979
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched...
CVE-2026-5981 D-Link DIR-605L POST Request formAdvFirewall buffer overflow
A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has...
CVE-2026-34971
creationtimestamp| type| source ---|---|--- 2026-04-09 21:10:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ptjezrn2g 2026-04-09 21:22:00+00:00| seen| Telegram/6RgwCZFc4Ae1eVERGO141ZaFCzdAoL4kSRzFJKo9cZLKyo 2026-05-24 21:26:28+00:00| seen|...
CVE-2026-28205
creationtimestamp| type| source ---|---|--- 2026-04-09 21:04:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3pjao2lj2z 2026-04-09 21:22:00+00:00| seen| Telegram/6RgwCZFc4Ae1eVERGO141ZaFCzdAoL4kSRzFJKo9cZLKyo...
CVE-2025-43517
creationtimestamp| type| source ---|---|--- 2026-04-09 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pez5rau2n...
CVE-2026-29146
creationtimestamp| type| source ---|---|--- 2026-04-09 21:01:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mj3pckzmjc2j 2026-04-09 22:48:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3vcs73fa25 2026-04-09 23:23:44+00:00| seen|...
CVE-2026-5980 D-Link DIR-605L POST Request formSetMACFilter buffer overflow
A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of the file /goform/formSetMACFilter of the component POST Request Handler. This manipulation of the argument curTime causes buffer overflow. The attack may be initiated remotely. The exploit...
CVE-2026-35063
creationtimestamp| type| source ---|---|--- 2026-04-09 20:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ovqaia32n 2026-04-09 21:22:18+00:00| published-proof-of-concept| Telegram/J52JBZg8WrLGGx6kRSNOXLCMOEds74O2ZZxihtNidTT3Fd0 2026-04-09 21:22:41+00:00|...
CVE-2026-5979 D-Link DIR-605L POST Request formVirtualServ buffer overflow
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched...
CVE-2026-5979
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched...
CVE-2026-5979
D-Link DIR-605L, firmware 2.13B01, has a vulnerability in the POST Request Handler’s function formVirtualServ. The bug arises from manipulating the curTime argument, causing a buffer overflow. This enables a remote attack, with the exploit publicly available, and affects devices no longer support...
CVE-2026-5979 D-Link DIR-605L POST Request formVirtualServ buffer overflow
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched...
CVE-2026-39943
creationtimestamp| type| source ---|---|--- 2026-04-09 20:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3nx5k5gh2i...
CVE-2026-39957
creationtimestamp| type| source ---|---|--- 2026-04-09 20:31:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3no72h7p2i...
CVE-2026-25435
creationtimestamp| type| source ---|---|--- 2026-04-09 20:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj3nkwqtre2w...
CVE-2026-39856
creationtimestamp| type| source ---|---|--- 2026-04-09 19:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ljwyqoc2j...