75263 matches found
CVE-2026-16793
creationtimestamp| type| source ---|---|--- 2026-08-04 22:21:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msc2dixf3i2n...
CVE-2026-52370
A reflected cross-site scripting XSS vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...
NPM: Ghost: Member existence leak via magic link sign-in response
NPM: Ghost: Member existence leak via magic link sign-in response vulnerability discovered by ? in WordPress Npm ghost versions = 5.18.0, 6.21.1...
GHSA-3CG5-48J3-V4GV
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...
CVE-2026-70494
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d 2026-08-04 22:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4gwhhcjz2ufst...
CVE-2026-66902
creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...
CVE-2026-66901
creationtimestamp| type| source ---|---|--- 2026-08-04 21:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3iwqm2chk7oin...
CVE-2026-70620 Odysseus SSRF via Embedding Endpoint Configuration
Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind...
CVE-2026-45538
creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...
CVE-2026-70486
creationtimestamp| type| source ---|---|--- 2026-08-04 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n 2026-08-04 22:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5...
GHSA-H6X2-583H-X99R Open WebUI: DNS Rebinding SSRF Bypass
Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...
CVE-2026-67551
creationtimestamp| type| source ---|---|--- 2026-08-04 19:48:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6xhmka3yohgj5 2026-08-05 06:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5imjmiyodl5vq...
CVE-2026-68080
creationtimestamp| type| source ---|---|--- 2026-08-04 19:36:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ipitlklyvgkln...
CVE-2026-68077
creationtimestamp| type| source ---|---|--- 2026-08-04 19:24:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dmnlv6p3la6cs...
CVE-2026-16618
creationtimestamp| type| source ---|---|--- 2026-08-04 19:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpr42iup2l...
CVE-2026-47616
creationtimestamp| type| source ---|---|--- 2026-08-04 18:49:15+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msboiblw2p2l...
CVE-2026-66275
creationtimestamp| type| source ---|---|--- 2026-08-04 18:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ff4uaoe56so2a...
CVE-2026-47623
creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bly5qs5x5ynn 2026-08-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msl6vsra472o...
EUVD-2026-52809
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...