112549 matches found
CVE-2019-25753
creationtimestamp| type| source ---|---|--- 2026-06-19 19:26:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo34aofex2h...
CVE-2026-49345
CVE-2026-49345 affects Mercator before 2025.05.19. The SSRF flaw resides in the CVE configuration panel (/admin/config/parameters) where ConfigurationController.testProvider() passes user input directly to curl_init() without validating scheme/host/IP. An authenticated user with configure permiss...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726 Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726
AWX/AUTOMATION-CONTROLLER GitHub webhook integration vulnerability (CVE-2026-12726): processing of GitHub pull_request webhooks stores statuses_url from the payload without validating it points to a trusted GitHub API endpoint. If a job template uses a GitHub Personal Access Token as the webhook ...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2019-25748
creationtimestamp| type| source ---|---|--- 2026-06-19 18:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monyikgprg2k...
CVE-2017-20277
creationtimestamp| type| source ---|---|--- 2026-06-19 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxfyu6sh2m...
CVE-2017-20271
creationtimestamp| type| source ---|---|--- 2026-06-19 18:16:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monx7bs5ih2g...
CVE-2026-56208
creationtimestamp| type| source ---|---|--- 2026-06-19 18:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwzcdtp32g 2026-07-03 18:39:31+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6zgm4al2z...
CVE-2017-20276
creationtimestamp| type| source ---|---|--- 2026-06-19 18:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwoylnca2g...
CVE-2026-56210
creationtimestamp| type| source ---|---|--- 2026-06-19 17:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvskb57d2x...
CVE-2026-56211
creationtimestamp| type| source ---|---|--- 2026-06-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k...
CVE-2007-5722
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6792df86-691e-4a71-8d28-00ccfbafdf49 2026-06-23 14:04:18+00:00| exploited|...
GHSA-Q7J3-V8QV-22VQ OpenTofu: Possible arbitrary file read during certain git operations via a maliciously crafted URL
Impact Possible data exposure. Summary While downloading packages from a maliciously crafted URL, some git operations against that URL could allow arbitrary file read. This might allow disclosure of confidential information. Details OpenTofu relies on go-getter for downloading packages like...
CVE-2017-20269 Joomla! Component KissGallery 1.0.0 SQL Injection
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...
CVE-2017-20269
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive...