112138 matches found
CVE-2026-59549
creationtimestamp| type| source ---|---|--- 2026-07-27 16:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrnbqpcu7s22 2026-08-12 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msvtppnvsb2g...
GO-2026-6084 Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL in gitea.dev
Gitea: SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL in gitea.dev...
CVE-2026-65766
creationtimestamp| type| source ---|---|--- 2026-07-27 15:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn66d2p442y...
CVE-2026-47086
A flaw was found in cyrus-imapd. An authenticated user could exploit this vulnerability by minting a URLAUTH token through the GENURLAUTH command. This allows bypassing Access Control Lists ACLs, which are rules that control access to mailboxes. Consequently, an attacker could read mail from any...
CVE-2026-57152
creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...
CVE-2026-47678
creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...
CVE-2026-53610
creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...
CVE-2026-52848
creationtimestamp| type| source ---|---|--- 2026-07-27 12:40:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x...
GHSA-6PQ5-P7FC-7XHQ
creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...
CVE-2026-17534
Kimi Code @moonshot-ai/kimi-code before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call for example via prompt injectio...
CVE-2026-17534 Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects
Kimi Code @moonshot-ai/kimi-code before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call for example via prompt injectio...
EUVD-2026-49134
Kimi Code @moonshot-ai/kimi-code before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call for example via prompt injectio...
CVE-2026-17534
Kimi Code fetch path FetchURL is vulnerable before 0.27.0: it hardens SSRF protection with a static hostname and IP-literal denylist in assertSafeFetchTarget but does not resolve DNS or re-validate after HTTP redirects. An attacker who can influence a FetchURL call (e.g., via prompt injection) ca...
CVE-2026-14957
creationtimestamp| type| source ---|---|--- 2026-07-27 08:30:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116991002509583973 2026-09-02 05:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muj5qf4wef2q...
CVE-2026-48354
creationtimestamp| type| source ---|---|--- 2026-07-27 08:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmi5p2yhe27...
CVE-2026-14236
The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a Stripe checkout, allowing an unauthenticated attacker to redirect a victim, via a crafted link, to an arbitrary external site aft...
CVE-2026-64410
creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y...
CVE-2026-64392
creationtimestamp| type| source ---|---|--- 2026-07-27 06:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmarpnodf2s...
CVE-2026-64384
creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmakkgqiq2z 2026-09-02 04:45:25+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902...