64983 matches found
CVE-2026-57167
creationtimestamp| type| source ---|---|--- 2026-07-10 23:09:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbe3sakx2d 2026-07-11 00:18:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfa5vvni2z...
CVE-2026-55669
creationtimestamp| type| source ---|---|--- 2026-07-10 23:00:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdatvtvhq26...
CVE-2026-59180
creationtimestamp| type| source ---|---|--- 2026-07-10 22:58:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdar3hpo42x...
CVE-2026-39903
creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdad5ewbv2y 2026-07-11 00:18:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf7jzsx32y...
CVE-2026-1667
creationtimestamp| type| source ---|---|--- 2026-07-10 22:50:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdacfneqy2i 2026-07-11 00:14:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdezilp4u2y 2026-07-11 00:54:12+00:00| seen|...
CVE-2026-55187
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55213
creationtimestamp| type| source ---|---|--- 2026-07-10 22:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5liddlb2j...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187
Mailpit contains an SSRF protection gap in Link Check API prior to v1.30.2. The internal IsInternalIP deny-list only blocks common IPv4 private/local addresses and CGNAT, and does not recognize several IPv6 forms that embed IPv4 destinations or IPv6 prefixes outside standard private ranges. Bypas...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
EUVD-2026-43052
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
CVE-2026-56279
creationtimestamp| type| source ---|---|--- 2026-07-10 21:22:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3frisgd2x 2026-07-12 07:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgm7y2z7525...
CVE-2026-57575
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...
CVE-2026-55665
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
CVE-2026-13461
creationtimestamp| type| source ---|---|--- 2026-07-10 21:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqd2wabcgv22...
CVE-2026-55789
creationtimestamp| type| source ---|---|--- 2026-07-10 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd26i3vhl2k 2026-07-11 02:01:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdkxyc7jz2s...
CVE-2026-55665 DOM-based XSS in Grist via unsanitized links, enabling privilege escalation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
CVE-2026-57575 Misskey: SSRF bypass in URL Preview
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...