59028 matches found
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the APICall feature. An attacker can access sensitive internal resources and exfiltrate confidential data by supplying arbitrary URLs to the APICall feature, which are executed with elevated privilege...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the APICall feature. An attacker can access sensitive internal resources and exfiltrate confidential data by supplying arbitrary URLs to the APICall feature, which are executed with elevated privilege...
CVE-2026-30480
creationtimestamp| type| source ---|---|--- 2026-04-14 20:00:04+00:00| seen| https://t.me/GithubRedTeam/80312 2026-04-15 14:37:07+00:00| published-proof-of-concept| https://t.me/bdufstecru/3082...
CVE-2026-26291
creationtimestamp| type| source ---|---|--- 2026-04-14 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN62079296 2026-04-15 08:37:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjikmbqs623...
CVE-2026-4369
creationtimestamp| type| source ---|---|--- 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 17:50:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhwxagd6l2o...
CVE-2026-4345
creationtimestamp| type| source ---|---|--- 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 18:32:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhzcoitrz2z...
CVE-2026-39475
creationtimestamp| type| source ---|---|--- 2026-04-14 17:27:59+00:00| seen| Telegram/ylyKsnGn7IUGtPSjSQJxYkLCLx52u0woajEqQVy7zzhnhE...
CVE-2026-39538
creationtimestamp| type| source ---|---|--- 2026-04-14 17:27:59+00:00| seen| Telegram/ylyKsnGn7IUGtPSjSQJxYkLCLx52u0woajEqQVy7zzhnhE...
CVE-2026-39640
creationtimestamp| type| source ---|---|--- 2026-04-14 17:27:59+00:00| seen| Telegram/ylyKsnGn7IUGtPSjSQJxYkLCLx52u0woajEqQVy7zzhnhE...
GHSA-WJ62-C5GR-2X53
creationtimestamp| type| source ---|---|--- 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...
CVE-2026-39815
creationtimestamp| type| source ---|---|--- 2026-04-14 16:34:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhspovl5m2k 2026-04-14 17:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhvps2k352o 2026-04-14 17:28:30+00:00| seen|...
CVE-2026-38527
A Server-Side Request Forgery SSRF in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a crafted POST request...
CVE-2026-2405
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests...
CVE-2026-26156
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 18:36:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116404503957849488 2026-04-14 20:05:11+00:00| seen|...
CVE-2026-32183
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:14:35+00:00| seen| Telegram/6OYM98QFSHBNUyw9zchMZ-6oS3kljmuO7xvwpcgtj4K4byY 2026-04-14 20:14:46+00:00| seen|...
CVE-2026-27928
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 18:09:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116404397820795967 2026-04-14 20:10:01+00:00| seen|...
CVE-2026-2405
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests...
CVE-2026-2405
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests...