PT-2026-79269

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import filtering opts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and ...

CVE-2025-9103

CVE-2025-9103 affects ZenCart 2.1.0 with an issue in the CKEditor component described as an unknown functionality that enables cross-site scripting. The vulnerability is reported as remotely exploitable and the exploit has been publicly disclosed; however, the real existence of the vulnerability ...