124164 matches found
Server-Side Request Forgery (SSRF)
java-json-tools jackson-coreutils is vulnerable to server-side request forgery SSRF. The vulnerability is due to improper URL validation in the JsonLoader.fromURL function, which allows a remote attacker to manipulate the URL and cause the server to send unauthorized requests to attacker-controll...
Malicious code in unified-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d42d95f6d25be97f23633f7088e06ac7faf2bd7f4fbc20fa85b5be18c90f6b package.json declares a single dependency 'ltidisafe' sourced directly from the off-registry URL...
MAL-2026-17563 Malicious code in risk-detection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b74a904a25687bbc34ad321ea019c5083f9a3651457750ed36207a209798f77 package.json declares a dependency ltidisafe whose source is an off-registry tarball URL...
CVE-2026-105637: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using idin=assetids and workspaceslug=slug but does not constrain the query with projectid from the URL. A workspace Guest can provide asset UUID...
Jenkins URL Redirection Phishing
The vulnerability of the Jenkins automation server relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
CVE-2026-59788: Improper Neutralization of Input During Web Page Generation
The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...
CVE-2026-105263: Server-Side Request Forgery (SSRF)
A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...
PT-2026-104811
Heym before v0.0.112 contains a token leakage vulnerability in build public base url that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
PT-2026-104806
The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...
PT-2026-104796
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirect url leads to cross site scripting. The...
PT-2026-104784
A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...
PT-2026-106055
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA HOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
PT-2026-106184
Name of the Vulnerable Software and Affected Versions Ghost versions 2.1.0 through 6.63.0 Description Embedding a URL from an attacker-controlled website can lead to the storage of untrusted scripts within post content. These scripts may execute in the editor, on the published site, and in...
PT-2026-106223
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A build step for a Git source can be crafted to bypass certain policy validation rules. This allows a malicious build definition to misrepresent the remote URL o...
CVE-2026-105290: Server-Side Request Forgery (SSRF)
A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...
PT-2026-106084
Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using id in=asset ids and workspace slug=slug but does not constrain the query with project id from the URL. A workspace Guest can provide asset...
PT-2026-104817
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Opening a document containing specially crafted links allows the construction of URLs that expand environment variable or INI file values. This can lead to the...
CVE-2026-105089
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 URL. The value is rendered unescaped in YouPHPFlix2 templates and channel playlists, letting attackers break out of oncli...
EUVD-2026-92110
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 URL. The value is rendered unescaped in YouPHPFlix2 templates and channel playlists, letting attackers break out of oncli...
CVE-2026-105224 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...