124537 matches found
PT-2026-53646
Summary Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response ...
PT-2026-53441
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connection url property with...
PT-2026-53251
Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the submit-url argument within the formAccept function of the...
CVE-2026-55844: Cleartext Transmission of Sensitive Information
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist for internal networks. The app uses SSID to detect when to use the internal URL, but whenever the app cannot find any other URL to ...
PT-2026-53526
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...
PT-2026-53571
Summary PyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...
python3.11 security update
3.11.13-10.0.1 - Remove upstream URL reference Orabug: 36073032 3.11.13-10 - Depend on sqlite-libs with deserialize API Resolves: RHEL-178519...
PT-2026-53652
Name of the Vulnerable Software and Affected Versions googleapis/mcp-toolbox affected versions not specified Description A path traversal issue exists in the HTTP tool URL builder. When constructing downstream API requests, the tool substitutes user-controlled pathParams into the configured tool...
PT-2026-53430
Impact The POST /api/v2/firefighter/raid/jira bot endpoint CreateJiraBotView is reachable without authentication permission classes = permissions.AllowAny. Its attachments payload is fetched server-side via httpx.get with no URL validation, then uploaded as an attachment on the Jira ticket that...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-2581 DESCRIPTION: This is an uncontrolled resource consumption vulnerability CWE-400 that can lead to Denial of Service DoS. In vulnerable Undici...
CVE-2009-3476
creationtimestamp| type| source ---|---|--- 2026-06-28 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpekuu6zb62w...
CVE-2026-53284
creationtimestamp| type| source ---|---|--- 2026-06-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpeh6og4qu2x 2026-06-29 10:39:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgce6ypph2t 2026-10-01 18:00:00+00:00| seen|...
CVE-2010-2452
creationtimestamp| type| source ---|---|--- 2026-06-28 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpeftvzoqr2w...
CVE-2026-13500
creationtimestamp| type| source ---|---|--- 2026-06-28 16:06:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpee5br4c727 2026-06-29 14:50:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqe2fyrg2o 2026-06-29 17:05:18+00:00| seen|...
CVE-2026-13490
creationtimestamp| type| source ---|---|--- 2026-06-28 13:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe4tnqnwd2s 2026-06-29 19:28:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ujffep23...
CVE-2012-3054
creationtimestamp| type| source ---|---|--- 2026-06-28 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpdrq76jfy2k...
CVE-2026-58058
creationtimestamp| type| source ---|---|--- 2026-06-28 06:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdcgzngeo2n 2026-06-29 00:35:19+00:00| seen| https://bsky.app/profile/dretsdigitals.bsky.social/post/3mpfakzynrv2j 2026-06-29 20:46:30+00:00| seen|...
CVE-2026-58050
creationtimestamp| type| source ---|---|--- 2026-06-28 05:35:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdauuqzkh2o 2026-06-28 08:29:56+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpdkms5yf726 2026-06-29 02:55:09+00:00| seen|...
CVE-2026-58051
creationtimestamp| type| source ---|---|--- 2026-06-28 05:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpd7r32fhd23 2026-06-29 08:19:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116832414961464067 2026-06-29 14:53:00+00:00| seen|...
CVE-2026-58049
creationtimestamp| type| source ---|---|--- 2026-06-28 02:49:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpcxm2ljnz2i 2026-06-28 05:30:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdalwcm4y2z 2026-06-28 06:00:59+00:00| seen|...