osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

CVE-2026-51564

CVE-2026-51564 Security Advisory for CVE-2026-51564 Description An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. Affected Components: App/Route.php, publichtml/index.php Mitigation At the time of...

CLEANSTART-2024-ZL42892 Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol

CVE-2022-22748 affects multiple packages. Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol. See references for individual vulnerability details...

CVE-2026-14467

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

CVE-2026-14467 Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

CVE-2026-14467

The Forocoches comments editor contains an information disclosure vulnerability that enables attackers to harvest unauthorized user information. An attacker can achieve this by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their ...

CVE-2026-14467 Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

PT-2026-133317

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

CVE-2026-14467: Forocoches Forocoches comments editor: An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain…

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

Astra Linux – vulnerability in Firefox and Thunderbird

A website might have obscured the fullscreen notification by using a URL with a scheme processed by an external program, such as a mailto URL. This could have caused user confusion and potentially led to spoofing attacks. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird...

EUVD-2026-93507

Payload external upload trust validation issue...

CVE-2026-105861

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861

The headless content management system Payload is vulnerable in versions after 3.0.0 and before 3.90.0 . The flaw resides in the authenticated external URL-based upload retrieval feature, where the system fails to verify the trustworthiness of a redirected destination. This origin validation erro...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861: Exposure of Sensitive Information to an Unauthorized Actor

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

PT-2026-106794

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.1 through 3.89.9 Description Authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that has not been verified as trusted. This behavior may expose a valid session to ...

CLEANSTART-2024-OJ63880 Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL

Security vulnerability affects the drupal7 package. Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL...

Astra Linux – Vulnerability in Thunderbird, Firefox

A website could have obscured the full-screen notification by using a URL that was processed by an external program, such as a mailto URL. This could have caused confusion among users and potentially led to spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbi...

CVE-2026-86853 Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS

A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1...