118803 matches found
GHSA-X2QX-6953-8485
creationtimestamp| type| source ---|---|--- 2026-04-28 12:00:29+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mkkjx4rbxg2s...
Server-side Request Forgery (SSRF)
Overview @dadigua/hyperchat is a HyperChat Core - Node.js backend and CLI tool with AI chat, MCP support Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch function in the AI Proxy Middleware component when processing the baseurl argument. An attack...
EUVD-2026-26001
A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...
CVE-2026-7234 BrowserOperator browser-operator-core server.js startsWith path traversal
A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...
CVE-2026-31629
creationtimestamp| type| source ---|---|--- 2026-04-28 05:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjvsiev3j2n 2026-07-02 05:50:16+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...
CVE-2026-42208
creationtimestamp| type| source ---|---|--- 2026-04-28 05:12:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjt6gwxzm25 2026-04-28 09:39:14+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mkkc2kw66e2u 2026-04-28 16:43:02+00:00| seen|...
CVE-2026-31627
creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshysxsk2z 2026-07-02 05:50:12+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...
CVE-2026-31644
creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshrf7fs2z 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...
CVE-2026-31638
creationtimestamp| type| source ---|---|--- 2026-04-28 04:28:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqo5aoza2z...
CVE-2026-31637
creationtimestamp| type| source ---|---|--- 2026-04-28 04:27:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqnvpjxx2f 2026-07-02 05:50:21+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...
CVE-2026-7221
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...
CVE-2026-7221
CVE-2026-7221 affects TencentCloudBase CloudBase-MCP (up to v2.17.0) with a vulnerability in the openUrl function (mcp/src/interactive-server.ts) of the open-url API Endpoint. Manipulating req.body.url enables server-side request forgery (SSRF) and can be exploited remotely; the exploit is public...
CVE-2026-7221 TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...
CVE-2026-7221
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...
CVE-2026-7221 TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...
CVE-2026-7177
creationtimestamp| type| source ---|---|--- 2026-04-28 02:18:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkjjfn2aab23...
CVE-2025-48431
creationtimestamp| type| source ---|---|--- 2026-04-28 01:47:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjhpkotqm2u 2026-04-28 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkktqjzizg2h 2026-07-21 12:49:42+00:00| seen|...
CVE-2026-41603
creationtimestamp| type| source ---|---|--- 2026-04-28 01:37:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjh5ntlpa2z 2026-04-28 15:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkucgueag2i...
CVE-2026-41604
creationtimestamp| type| source ---|---|--- 2026-04-28 01:27:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjglqxpiy2b 2026-08-27 11:48:02+00:00| seen| https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8...