64832 matches found
CVE-2026-16327
The CVE-2026-16327 entry concerns D-Link DNS-320 firmware 1.0.2 where the /web/web_file/upload.php upload handling is vulnerable. Manipulating the File argument enables unrestricted file upload, with the attack executable remotely. The exploit has been publicly disclosed. No further remediation d...
CVE-2026-55544
creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fkeqfif2u...
CVE-2026-55668
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:33+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-8wc8-hf36-mjh9...
CVE-2026-56833
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c...
CVE-2026-56835
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:12+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr...
CVE-2026-56838
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg...
CVE-2026-57122
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...
CVE-2026-57136
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vjv9-7m7j-h833...
CVE-2026-57138
creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:02+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp...
CVE-2026-47130
creationtimestamp| type| source ---|---|--- 2026-07-20 22:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cfts2ly27...
CVE-2026-64626 AVideo Encoder downloadURL SSRF via unpinned retry fallback
AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...
CVE-2026-13380
creationtimestamp| type| source ---|---|--- 2026-07-20 21:46:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4bep6swv2r...
GHSA-8C25-4J27-2RV3 Mistune: XSS via percent-encoded javascript URI bypass in safe_url()
Summary An XSS vulnerability in Mistune allows bypassing of safeurl protections via percent-encoded javascript URIs. Details The vulnerability exists in HTMLRenderer.safeurl in Mistune. The function is intended to block harmful URL schemes such as "javascript:" by checking the prefix of the...
CVE-2026-58624
creationtimestamp| type| source ---|---|--- 2026-07-20 21:25:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr4a743w7m25 2026-07-20 22:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eyfbiel2e...
CVE-2026-60027
creationtimestamp| type| source ---|---|--- 2026-07-20 21:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4a5lmfox2q...
CVE-2026-60030
creationtimestamp| type| source ---|---|--- 2026-07-20 21:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr47vvpj5n2o...
CVE-2026-53595
creationtimestamp| type| source ---|---|--- 2026-07-20 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr45zei2rd2u 2026-07-20 21:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c4cmak22e 2026-07-20 22:00:43+00:00| seen|...
GHSA-499R-G7PC-VMP9
creationtimestamp| type| source ---|---|--- 2026-07-20 20:32:00+00:00| seen| https://gist.github.com/alon710/4520df6a85d072915e787e3825f8e5ef...
CVE-2026-61425
creationtimestamp| type| source ---|---|--- 2026-07-20 19:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42rnsk3j2r 2026-07-20 21:02:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46wcuhar2e...