CVE-2026-13540 GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery

A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. The attack i...

CVE-2026-54282

A flaw was found in Starlette, a lightweight Asynchronous Server Gateway Interface ASGI framework. Prior to version 1.3.0, the HTTP request path was not properly validated when reconstructing the request.url. A remote attacker could craft a malicious HTTP request path that does not begin with a...

CVE-2026-13526

creationtimestamp| type| source ---|---|--- 2026-06-29 04:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmryyzdh2e...

CVE-2026-13530

creationtimestamp| type| source ---|---|--- 2026-06-29 04:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmjzor3l23 2026-06-29 19:54:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphbe7zq3r2d...

CVE-2026-13519

creationtimestamp| type| source ---|---|--- 2026-06-29 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfiomtph42p 2026-06-29 04:33:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfnv4hres27 2026-06-29 12:59:29+00:00| seen|...

CVE-2026-49991

creationtimestamp| type| source ---|---|--- 2026-06-29 01:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfby6r6fp2x 2026-06-29 05:10:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpfpwvwcr226...

CVE-2026-56123

creationtimestamp| type| source ---|---|--- 2026-06-29 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfaoajjhc2y...

PT-2026-53283

Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 2025.5.0 Description The iOS companion app fails to respect the SSID allowlist for internal networks. While the app typically uses the Service Set Identifier SSID—the public name of a wireless network—to...

PT-2026-53251

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the submit-url argument within the formAccept function of the...

PT-2026-53652

Name of the Vulnerable Software and Affected Versions googleapis/mcp-toolbox affected versions not specified Description A path traversal issue exists in the HTTP tool URL builder. When constructing downstream API requests, the tool substitutes user-controlled pathParams into the configured tool...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-2581 DESCRIPTION: This is an uncontrolled resource consumption vulnerability CWE-400 that can lead to Denial of Service DoS. In vulnerable Undici...

CVE-2009-3476

creationtimestamp| type| source ---|---|--- 2026-06-28 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpekuu6zb62w...

CVE-2026-53284

creationtimestamp| type| source ---|---|--- 2026-06-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpeh6og4qu2x 2026-06-29 10:39:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgce6ypph2t...

CVE-2010-2452

creationtimestamp| type| source ---|---|--- 2026-06-28 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpeftvzoqr2w...

CVE-2026-13500

creationtimestamp| type| source ---|---|--- 2026-06-28 16:06:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpee5br4c727 2026-06-29 14:50:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqe2fyrg2o 2026-06-29 17:05:18+00:00| seen|...

CVE-2026-13490

creationtimestamp| type| source ---|---|--- 2026-06-28 13:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe4tnqnwd2s 2026-06-29 19:28:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ujffep23...

CVE-2012-3054

creationtimestamp| type| source ---|---|--- 2026-06-28 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpdrq76jfy2k...

CVE-2026-58058

creationtimestamp| type| source ---|---|--- 2026-06-28 06:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdcgzngeo2n 2026-06-29 00:35:19+00:00| seen| https://bsky.app/profile/dretsdigitals.bsky.social/post/3mpfakzynrv2j 2026-06-29 20:46:30+00:00| seen|...

CVE-2026-58050

creationtimestamp| type| source ---|---|--- 2026-06-28 05:35:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdauuqzkh2o 2026-06-28 08:29:56+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpdkms5yf726 2026-06-29 02:55:09+00:00| seen|...

CVE-2026-58051

creationtimestamp| type| source ---|---|--- 2026-06-28 05:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpd7r32fhd23 2026-06-29 08:19:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116832414961464067 2026-06-29 14:53:00+00:00| seen|...