CVE-2026-7525

creationtimestamp| type| source ---|---|--- 2026-05-15 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlupjlfta42h...

CVE-2025-52540

creationtimestamp| type| source ---|---|--- 2026-05-15 04:31:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mluird35wg2r...

CVE-2024-36345

creationtimestamp| type| source ---|---|--- 2026-05-15 04:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mluhnhajwz2h...

CVE-2026-4608

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:08+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mludokvtcu2l...

CVE-2020-17103

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:06+00:00| published-proof-of-concept| Telegram/4tIKexrP1B7eYtOW91-QaKQ8EIqNMri3pu2CJIQ1mA899I 2026-05-16 09:09:16+00:00| seen| https://t.me/P0x3k1N73LL1G3NC3/354 2026-05-16 09:41:16+00:00| seen|...

SUSE CVE-2016-9244

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer SSL session IDs from other sessions. It is possible...

CVE-2026-6811

creationtimestamp| type| source ---|---|--- 2026-05-15 02:16:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlubaimv242n...

CVE-2026-44428

creationtimestamp| type| source ---|---|--- 2026-05-15 01:51:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu7toomzp2k...

CVE-2026-44673

creationtimestamp| type| source ---|---|--- 2026-05-15 01:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu77cs2dv2v...

CVE-2026-44661

creationtimestamp| type| source ---|---|--- 2026-05-15 01:21:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu66cf3a32r...

CVE-2025-67031

ORSEE 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem. Certain field configurations accept values starting with the prefix "func:" , which are passed directly into an eval() call inside tagsets/participant.php and tagsets/o...

PT-2026-41373

ORSEE Online Recruitment System for Economic Experiments 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem. Certain field configurations accept values beginning with the prefix "func:" which are passed directly into an eval...

CVE-2025-67031

ORSEE Online Recruitment System for Economic Experiments 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem. Certain field configurations accept values beginning with the prefix "func:" which are passed directly into an eval...

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.8.0 had a cross-site scripting vulnerability. This vulnerability stemmed from the profileimageurl field in the user profile update form accepting arbitrary data: URI...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.3 contained a security vulnerability. This vulnerability stemmed from the channel webhook creation/update process accepting arbitrary profileimageurl values,...

CVE-2026-8597

creationtimestamp| type| source ---|---|--- 2026-05-14 22:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlttjwjlqv2p...

Cross-site Scripting (XSS)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Cross-site Scripting XSS via the profileimageurl process. An attacker can execute arbitrary JavaScript in the context of another authenticated user's session by crafting a malicious SVG image as their OAuth...

GHSA-3WGJ-C2HG-VM6Q Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url

Summary When a user signs in via OAuth, Open WebUI fetches the picture claim URL, infers a MIME type from the URL extension via mimetypes.guesstype, and stores data:;base64,... as the user's profile image. The OAuth code path does not go through the validateprofileimageurl Pydantic validator that...

Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url

Summary When a user signs in via OAuth, Open WebUI fetches the picture claim URL, infers a MIME type from the URL extension via mimetypes.guesstype, and stores data:;base64,... as the user's profile image. The OAuth code path does not go through the validateprofileimageurl Pydantic validator that...

Server-side Request Forgery (SSRF)

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the OAuthManager profile picture fetch path in the OAuth handling code. An attacker can make the server send outbound requests to arbitrary URLs by supplying a malicio...