58970 matches found
CVE-2026-44905
creationtimestamp| type| source ---|---|--- 2026-05-11 20:29:17+00:00| seen| https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc 2026-05-26 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3violnv2e 2026-05-27 01:13:40+00:00| seen|...
CVE-2026-44284
FastGPT is an AI Agent building platform. Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP tool URL handling. The direct MCP preview/run endpoints already rejected internal/private network URLs, but the MCP tool create/update endpoints could still save an internal...
CVE-2026-42287
Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...
CVE-2021-47925
CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card creation and file upload endpoints. Attackers can inject XSS payloads through Employee card parameters or SVG file...
CVE-2026-42888 Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This...
CVE-2026-42888 Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This...
EUVD-2026-29297
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This...
CVE-2026-5266
creationtimestamp| type| source ---|---|--- 2026-05-11 19:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzp7kxcx2k 2026-05-11 19:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzp7kxcx2k...
CVE-2026-44996
creationtimestamp| type| source ---|---|--- 2026-05-11 19:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxu2s6ga2c 2026-05-11 19:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxu2s6ga2c...
CVE-2026-42876 External Secrets Operator: Priviledge escalation with secret overwriting
External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to create ExternalSecret resources can cause the operator to create a Secret that Kubernetes will automatically populat...
CVE-2026-45002
creationtimestamp| type| source ---|---|--- 2026-05-11 18:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx7csja72h...
CVE-2026-45001
creationtimestamp| type| source ---|---|--- 2026-05-11 18:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwtodafh2e...
CVE-2026-45000
OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...
GHSA-68W5-W573-Q2R8 MantisBT Has Authorization Bypass in Global Profile Creation
MantisBT allows a low-privileged authenticated user having addprofilethreshold to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a valid profile creation request. Impact Authentication bypass Patches -...
Authorization Bypass Through User-Controlled Key
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the userid parameter during the profile creation process. An attacker can gain unauthorized access to create global profiles by tampering wit...
CVE-2026-42603
creationtimestamp| type| source ---|---|--- 2026-05-11 17:27:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsbhyynu2l 2026-05-11 17:27:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsbhyynu2l...
CVE-2026-44658 Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation
Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same restriction. The provider maps each RSS/Atom item link into item.url, filters only for presence and...
CVE-2026-44658 Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation
Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same restriction. The provider maps each RSS/Atom item link into item.url, filters only for presence and...
CVE-2026-7815
creationtimestamp| type| source ---|---|--- 2026-05-11 16:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqoykwir2z 2026-05-26 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrd4azuq726...
CVE-2026-45000
OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...