23247 matches found
Liberapay: another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
Hello again i discovered that there is another Liberapay profile of Liberapay team member at liberapay.com/mdvhimself contains a link to an expired Twitter account, creating a Broken Link Hijacking BLH vulnerability. An attacker could register the expired handle and control what appears to be an...
OESA-2026-2226 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
OESA-2026-2227 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
CVE-2026-44738
creationtimestamp| type| source ---|---|--- 2026-05-09 10:54:58+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-j274-39qw-32c9 2026-05-11 17:27:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsbarcwj2g 2026-05-11...
CVE-2026-42309
creationtimestamp| type| source ---|---|--- 2026-05-09 08:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftrjndiz2i...
CVE-2026-42310
creationtimestamp| type| source ---|---|--- 2026-05-09 08:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftlkkmrt2t...
CVE-2026-45315
creationtimestamp| type| source ---|---|--- 2026-05-09 08:02:50+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m8f9-9whg-f4xr 2026-05-16 04:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlwxioao4w2c...
CVE-2026-8209
creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...
CVE-2026-42137
creationtimestamp| type| source ---|---|--- 2026-05-09 05:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfi3awge42k...
CVE-2026-42051
creationtimestamp| type| source ---|---|--- 2026-05-09 05:05:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhvbtop72h...
CVE-2026-42174
creationtimestamp| type| source ---|---|--- 2026-05-09 05:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhpvrzss2k...
CVE-2025-66170
creationtimestamp| type| source ---|---|--- 2026-05-09 04:46:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgsdlek52e 2026-05-10 06:15:00+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mli4aews2d22...
CVE-2026-45130
creationtimestamp| type| source ---|---|--- 2026-05-09 02:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7zonifu2i 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27 2026-06-08 09:19:26+00:00| seen|...
CVE-2026-44656
creationtimestamp| type| source ---|---|--- 2026-05-09 02:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7j2og4t2o 2026-05-09 09:00:04+00:00| seen| Telegram/Yr-1ppOQlsAxCk9olefEOIlRJklCfDEolOYJn0mNy08hY4...
PT-2026-41170
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.3 Description An application-wide Cross-Site Request Forgery CSRF issue exists in the image uploading functionality. An attacker can set an image URL to a malicious endpoint, causing any authenticated user who...
PT-2026-41167
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.3 Description The channel webhook create and update flow accepts arbitrary profile image url values, including base64-encoded SVG payloads. The endpoint '/api/v1/channels/webhooks/webhook id/profile/image'...
CVE-2026-42213
creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleuu7yjok2o...
CVE-2026-42298
creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuu5h24l2e 2026-05-09 01:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf2wfsfch2p 2026-05-09 03:00:31+00:00| seen|...
CVE-2026-44330
creationtimestamp| type| source ---|---|--- 2026-05-08 23:02:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rwww-x45w-p52w 2026-05-28 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmwaoshibg2p...