Lucene search
+L

4262 matches found

Cvelist
Cvelist
added 2026/04/08 6:12 p.m.23 views

CVE-2026-34721 Zammad has Cross-site request forgery (CSRF) in OAuth callback endpoints

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the OAuth callback endpoints for Microsoft, Google, and Facebook external credentials do not validate a CSRF state parameter. This vulnerability is fixed in 7.0.1 and 6.5.4...

5.9CVSS0.00103EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/04/08 6:56 a.m.143 views

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

9.8CVSS6.4AI score0.99757EPSS
SaveExploits23
RedHat Linux
RedHat Linux
added 2026/04/08 5:18 a.m.10 views

freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event

A heap buffer use after free has been discovered in FreeRDP. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free...

8.7CVSS6AI score0.00467EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/08 12:8 a.m.8 views

GHSA-Q4X6-6MM2-CRG9 WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services

Summary The Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege user with streaming permission to store an arbitrary callback URL...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.11 views

Zammad 跨站请求伪造漏洞

Zammad is a ticketing management software developed by the German company Zammad. Versions of Zammad prior to 7.0.1 and 6.5.4 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the lack of validation of the CSRF status parameter in the OAuth callback endpoint,...

6.5CVSS5.7AI score0.00103EPSS
SaveExploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2026/04/08 12:0 a.m.12 views

WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services

The Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege user with streaming permission to store an arbitrary callback URL and...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.9 views

openstatus 代码注入漏洞

OpenStatus is an open-source status page and availability monitoring platform developed by OpenStatus. OpenStatus has a code injection vulnerability, which stems from the operation of the callbackURL parameter in the Onboarding endpoint component...

5.3CVSS5.7AI score0.00282EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.8 views

PT-2026-31389

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9. This is due to missing or incorrect nonce validation on the 'vsz cf7 save setting callback' function. This makes it possible for unauthenticated attackers t...

5.4CVSS5.8AI score0.00136EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.16 views

PT-2026-31475

A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c. This impacts an unknown function of the file apps/dashboard/src/app/dashboard/onboarding/client.tsx of the component Onboarding Endpoint. The manipulation of the argument callbackURL results in...

5.3CVSS4.4AI score0.00282EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.6 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006780)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006780 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't fail inserts if duplicate has expired nftables selftests fail:...

6.2CVSS5.8AI score0.00203EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/07 11:16 p.m.5 views

freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event

A heap buffer use after free has been discovered in FreeRDP. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free...

8.7CVSS6AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/07 11:16 p.m.9 views

freerdp: FreeRDP has a heap-use-after-free in video_timer

A use after free flaw has been discovered in FreeRDP. The videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. A malicious server can trigger a client‑side heap use after free causing a crash DoS...

8.7CVSS5.8AI score0.00467EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/07 7:23 p.m.2 views

CVE-2026-39368

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/07 7:23 p.m.28 views

CVE-2026-39368 WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege...

6.5CVSS0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/07 5:7 p.m.9 views

CVE-2026-34969

Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers,...

7.5CVSS5.9AI score0.00267EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/04/07 5:3 p.m.5 views

CVE-2026-33510

Homarr is an open-source dashboard. Prior to 1.57.0, a DOM-based Cross-Site Scripting XSS vulnerability has been discovered in Homarr's /auth/login page. The application improperly trusts a URL parameter callbackUrl, which is passed to redirect and router.push. An attacker can craft a malicious...

8.8CVSS5.9AI score0.00234EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/04/07 4:41 p.m.16 views

capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution.

A flaw was found in Capstone, a disassembly framework. A local attacker could exploit a heap buffer overflow vulnerability by providing a specially crafted skipdata callback. This flaw occurs because the skipdata length is not properly bounds-checked, which may allow an attacker to write beyond...

7.8CVSS7.6AI score0.00198EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/04/07 6:25 a.m.3 views

freerdp: FreeRDP has a heap-use-after-free in video_timer

A use after free flaw has been discovered in FreeRDP. The videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. A malicious server can trigger a client‑side heap use after free causing a crash DoS...

8.7CVSS5.8AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/07 6:25 a.m.3 views

freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb

A heap buffer use after free has been discovered in FreeRDP. Asynchronous bulk transfer completions can use a freed channel callback after URBDRC channel close, leading to a use after free in urbwritecompletion...

8.7CVSS5.9AI score0.00467EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.19 views

PT-2026-30987

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted an attacker-controlled restreamerURL and later fetched that stored URL server-side, enabling stored SSRF for authenticated streamers. The vulnerable flow allowed a low-privilege...

6.5CVSS6AI score0.0021EPSS
SaveExploits0References4
Rows per page
Query Builder