123230 matches found
CSRF vulnerability and missing permission checks in scm-manager
scm-manager 1.11.1 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...
PT-2026-68120
Name of the Vulnerable Software and Affected Versions Eclipse Mojarra versions 2.3 and later Description URL handling in the DefaultFaceletFactory function does not properly sanitize or block remote URLs. This allows an attacker to specify a URL to a remote Facelet, which the server then includes...
PT-2026-76498
Root has patched GHSA-j4mr-9xw3-c9jx in the base64-url package for Root:npm. Multiple fixed versions available...
CVE-2026-70443: Improper Privilege Management
Jenkins Horreum Plugin 0.16.162.v33b4aab5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL...
PT-2026-68315
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.6.58 Description The web crawl tool contains a Server-Side Request Forgery SSRF flaw. The system performs a security check on the initial URL by resolving the hostname via socket.gethostbyname to reject private,...
CVE-2026-71270: Server-Side Request Forgery (SSRF)
Stirling-PDF's POST /api/v1/convert/url/pdf endpoint ConvertWebsiteToPDF.java was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints html/pdf, file/pdf, markdown/pdf...
CVE-2026-71191: Incorrect Authorization
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
PT-2026-68143
Name of the Vulnerable Software and Affected Versions Stirling-PDF affected versions not specified Description The POST /api/v1/convert/url/pdf endpoint in ConvertWebsiteToPDF.java lacks Server-Side Request Forgery SSRF protections. While the endpoint verifies that the initial URL resolves to a...
PT-2026-68278
Name of the Vulnerable Software and Affected Versions Jenkins Horreum Plugin versions 0.16.162.v33b 4a a b 5f828 and earlier Description An issue exists where the plugin fails to set the appropriate context for credentials lookup. This allows users with Item/Configure permissions to trick Jenkins...
GitPython Repo.clone_from() Unauthorized Access
The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
GHSA-XM43-3M56-W3WF
creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...
CVE-2026-45100
creationtimestamp| type| source ---|---|--- 2026-08-04 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbzwjdqcj2z...
CVE-2026-18813
creationtimestamp| type| source ---|---|--- 2026-08-04 21:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lkjejcezmnlb...
CVE-2026-54020
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL validation and rejected private, loopback, and link-local addresses, but the HTTP clients resolved the hostname again at connection time. An authenticat...
EUVD-2026-52920
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. The URLs the library requests are read from the credentials JSON, and their hosts were not checked against the universe domain before the...
GHSA-8X5V-CPV7-8JJP
creationtimestamp| type| source ---|---|--- 2026-08-04 20:31:40+00:00| seen| https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4...
CVE-2026-18811
Affected product: H3C NX15 V100R017. Vulnerable component: the Add function in /api/esps, where manipulating esps.filter.url leads to command injection. Impact: remote exploitation with high severity (per CVSS metrics). Exploit status: public; vendor was contacted early about disclosure. No remed...
EUVD-2026-52896
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The...
CVE-2026-18811
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The...