CVE-2026-53446: Server-Side Request Forgery (SSRF)

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/notifications/outgoing.js without applying the existing validateAttachmentUrl private-network checks from...

Wired Community Software WWWThreads 5.0 - SQL Command Input

Wired Community Software WWWThreads 5.0 - SQL Command Input source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulat...