112770 matches found
EUVD-2026-32527
Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's islocalurl function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to...
CVE-2026-48927
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs or views...
CVE-2026-48923
Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2026-48923
Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2026-48923
Jenkins AppSpider Plugin 1.0.17 and earlier is affected by a permission-check bypass in a form-validation method. The issue allows attackers with Overall/Read permissions to connect to an attacker-specified URL, enabling potential external requests from the plugin context. The affected component ...
CVE-2026-48906
creationtimestamp| type| source ---|---|--- 2026-05-27 13:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtna4mrm42c...
CVE-2026-45840
creationtimestamp| type| source ---|---|--- 2026-05-27 13:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtmvemvbk2i 2026-07-01 02:35:05+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-02 07:17:20+00:00| seen...
CVE-2026-48806
creationtimestamp| type| source ---|---|--- 2026-05-27 13:21:59+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtlzlisnd23 2026-07-27 09:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkfue7cy2o 2026-07-27 09:10:43+00:00| seen|...
CVE-2026-45845
creationtimestamp| type| source ---|---|--- 2026-05-27 13:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtl56f3bo2c 2026-07-01 02:34:53+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...
CVE-2026-42762
creationtimestamp| type| source ---|---|--- 2026-05-27 13:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkxs5e2p2q 2026-06-23 05:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mownfu4myd2u...
CVE-2026-3349
The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2026-9689
A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers URIs, a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks...
CVE-2026-48760
creationtimestamp| type| source ---|---|--- 2026-05-27 10:04:06+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtaxn3hnf2h 2026-05-27 14:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h...
CVE-2026-48489
creationtimestamp| type| source ---|---|--- 2026-05-27 10:03:46+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtax4kuhm2m 2026-05-27 14:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h 2026-07-16 14:37:07+00:00| seen|...
CVE-2026-8832
creationtimestamp| type| source ---|---|--- 2026-05-27 09:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7tcohta2q 2026-05-28 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86297 2026-05-28 21:00:04+00:00| seen| https://t.me/GithubRedTeam/86301 2026-05-28 23:00:11+00:00|...
CVE-2026-3349 MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter
The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2026-3349
The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2026-3349 MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter
The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2026-40847
creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:16+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:07+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...
CVE-2026-9022
The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...