45247 matches found
PT-2026-60051
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-56261: Server-Side Request Forgery (SSRF)
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-55187: Server-Side Request Forgery (SSRF)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-59794: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data...
PT-2026-57185
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 Description Stored Cross-Site Scripting XSS is possible on the cloud profile page. This occurs when the application fails to properly sanitize data reported by agents, allowing an attacker to injec...
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122
CVE-2026-58122 affects Hermes WebUI prior to 0.51.307. An authentication bypass allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by spoofing X-Forwarded-For with a loopback address. Exploitation enables server-side request forgery against ...
GHSA-V4HW-Q98X-8JMM vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-FGXJ-VFG7-CPQQ vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-XQCF-GWJ9-5C88 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-HXMM-JMJ9-253J vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-Q972-3FGV-WCHC vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-XMHG-RR34-2CHJ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-firecracker, linux-vmware, linux-aws, linux-qemu, linux-raspberry-pi-4, linux-desktop, linux-qemu-melange, linux-raspberry-pi, linux-azure...
CVE-2026-53153 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
CVE-2026-52940 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...