CVE-2026-34031

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to...

CVE-2026-52751

Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a malicious project file with a ghidra:// URL that, when opened via File → Open Project, deserializes...

CVE-2026-49497

Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnudebuglink sections before constructing file paths. Attackers can craft malicious ELF binaries with traversal sequences to probe filesystem existence and leak...

CVE-2026-53473 Migration-planner-ui-app: stored xss via javascript: url in agent credential link

A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user clicks this link in the user interface, the embedded malicious code executes within the user's browser...

CVE-2026-53473 Migration-planner-ui-app: stored xss via javascript: url in agent credential link

A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user clicks this link in the user interface, the embedded malicious code executes within the user's browser...

CVE-2026-53473 Migration-planner-ui-app: stored xss via javascript: url in agent credential link

A flaw was found in migration-planner-ui-app. An attacker can register a malicious discovery agent with a specially crafted credentialUrl containing JavaScript code. When an organizational user clicks this link in the user interface, the embedded malicious code executes within the user's browser...

GHSA-5G86-85RP-F9HX Papra HTTP redirect bypass can lead to SSRF via webhook delivery system

Summary Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local, and RFC-1918 ranges. The SSRF protection validates the registered webhook URL but...

CVE-2026-49740

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:35+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n...

CVE-2026-49738

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:35+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n...

CVE-2026-47352

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:35+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n...

CVE-2026-47350

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n...

CVE-2026-49938

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6ecbbi2y...

CVE-2026-53437

CVE-2026-53437 affects Jenkins 2.567 and earlier, and LTS 2.555.2 and earlier. The issue is an open redirect: the redirect URL after login is incorrectly treated as pointing to Jenkins when it contains tab or newline characters between “//”, enabling phishing attacks. The connected Nessus entry f...

CVE-2026-7542

creationtimestamp| type| source ---|---|--- 2026-06-10 12:16:31+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwovb24k72s...

CVE-2026-10721

creationtimestamp| type| source ---|---|--- 2026-06-10 11:22:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwltabaqc2p...

CVE-2026-11853

creationtimestamp| type| source ---|---|--- 2026-06-10 11:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkznj3r72m...

CVE-2026-7542

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and including 7.0.10. This is due to three compounding design flaws: 1 the plugin leaks a valid backend AJAX nonce revslideractions to all authenticated users including Subscribers via t...

CVE-2026-28262

Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-26240

creationtimestamp| type| source ---|---|--- 2026-06-10 08:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwd6iuxtk2l 2026-06-14 23:16:56+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvnyozf62m 2026-06-15 16:31:17+00:00| seen|...

CVE-2025-8444

creationtimestamp| type| source ---|---|--- 2026-06-10 08:36:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwcmlm4e42l 2026-06-10 18:16:30+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnxcz3qmg42s...