PT-2026-38254

Name of the Vulnerable Software and Affected Versions Masa CMS versions prior to 7.2.10 Masa CMS versions prior to 7.3.15 Masa CMS versions prior to 7.4.10 Masa CMS versions prior to 7.5.3 Description Improper handling of scheme-relative URLs allows for an open redirect. The application incorrect...

Hitachi Energy PCM600

SUMMARY Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions listed in this document. An attacker successfully exploiting this vulnerability can impact integrity of the product. Please refer to the Recommended Immediate Actions for information about...

GHSA-P34F-488J-5CWV

creationtimestamp| type| source ---|---|--- 2026-04-08 15:16:22+00:00| seen| Telegram/FBQImtKRYvjgrE67wEx022AiTPIajHaRZbB9YF5GqyRME...

Uncontrolled Recursion

Overview @stablelib/cbor is a CBOR encoder and decoder Affected versions of this package are vulnerable to Uncontrolled Recursion when decoding. An attacker can cause the application to crash or terminate unexpectedly by supplying a deeply nested, attacker-controlled CBOR payload that exhausts th...

GHSA-RCHW-322G-F7RM

creationtimestamp| type| source ---|---|--- 2026-02-28 07:40:11+00:00| seen| https://gist.github.com/alon710/ad7fc02718b15a210a981448af582910...

GHSA-CCQ9-C5HV-CF64

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:10+00:00| seen| https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1...

EUVD-2026-3004

EUVD-2026-3004...

EUVD-2026-3014

EUVD-2026-3014...

LLMs, You Can Evaluate It! Design of Multi-Perspective Report Evaluation for Security Operation Centers

Security operation centers SOCs often produce analysis reports on security incidents, and large language models LLMs will likely be used for this task in the near future. We postulate that a better understanding of how veteran analysts evaluate reports, including their feedback, can help produce...

EUVD-2025-38159

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

bnxt: Do not read past the end of test names

...

Open Redirect

Overview koa is a Koa web app framework Affected versions of this package are vulnerable to Open Redirect via the "back redirect" functionality. An attacker can cause users to be redirected to an external, attacker-controlled domain by supplying a specially crafted Referer header containing a...

EUVD-2021-28269

Malicious code in bioql PyPI...

GHSA-P7FW-VJJM-2RWP

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19497...

midiworld.com Open Redirect vulnerability OBB-4034330

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

downers.us Cross Site Scripting vulnerability OBB-3949745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ecoscoot-tahiti.com Cross Site Scripting vulnerability OBB-3940157

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

api.ffm.to Open Redirect vulnerability OBB-3939124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vivacorvetto.it Cross Site Scripting vulnerability OBB-3932347

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jeujouethique.com Improper Access Control vulnerability OBB-3931189

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...