124547 matches found
PT-2026-52548
MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidated downloadCallbackUrl and download url parameters. Attackers with default workspace USER role can...
CVE-2026-49277
creationtimestamp| type| source ---|---|--- 2026-06-24 23:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ztnvgtv22...
CVE-2026-33235
creationtimestamp| type| source ---|---|--- 2026-06-24 22:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2zbqsyw22g...
CVE-2026-45687
creationtimestamp| type| source ---|---|--- 2026-06-24 22:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ykfp6xu2f...
CVE-2026-49278
creationtimestamp| type| source ---|---|--- 2026-06-24 22:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xvn64o72k...
CVE-2020-14068
creationtimestamp| type| source ---|---|--- 2026-06-24 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2wgdt2t22m...
CVE-2020-15362
creationtimestamp| type| source ---|---|--- 2026-06-24 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2uqp3eve24...
CVE-2026-47733
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into and attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses...
CVE-2026-4297
creationtimestamp| type| source ---|---|--- 2026-06-24 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2tl5xum72l...
CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...
CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...
CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...
CVE-2026-54066
SiYuan (
CVE-2026-54066
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...
CVE-2026-47733
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into and attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses...
EUVD-2026-39089
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into and attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses...
CVE-2026-47733
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into and attributes without protocol sanitization. Unlike the analogous LinkSpan component — which uses...
CVE-2026-11998
CVE-2026-11998 affects AngularJS SCE (Strict Contextual Escaping) resource URLs. The flaw stems from the URL-matching logic using regular expressions, which can yield partial matches and bypass SCE policies, allowing unsafe values as resource URLs and potentially arbitrary JavaScript execution wi...
CVE-2026-11998 AngularJS XSS via SCE resource URL sanitization bypass
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...
CVE-2026-11998 AngularJS XSS via SCE resource URL sanitization bypass
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...