CVE-2026-57122

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:33+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x92v-rpx6-p6cw...

CVE-2026-57136

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:06+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vjv9-7m7j-h833...

CVE-2026-57138

creationtimestamp| type| source ---|---|--- 2026-07-20 22:36:02+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-vmmj-pfw7-fjwp 2026-09-15 12:08:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvklo3gxse2y 2026-09-15...

CVE-2026-47130

creationtimestamp| type| source ---|---|--- 2026-07-20 22:04:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cfts2ly27...

CVE-2026-64626 AVideo Encoder downloadURL SSRF via unpinned retry fallback

AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...

CVE-2026-13380

creationtimestamp| type| source ---|---|--- 2026-07-20 21:46:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr4bep6swv2r...

GHSA-8C25-4J27-2RV3 Mistune: XSS via percent-encoded javascript URI bypass in safe_url()

Summary An XSS vulnerability in Mistune allows bypassing of safeurl protections via percent-encoded javascript URIs. Details The vulnerability exists in HTMLRenderer.safeurl in Mistune. The function is intended to block harmful URL schemes such as "javascript:" by checking the prefix of the...

CVE-2026-58624

creationtimestamp| type| source ---|---|--- 2026-07-20 21:25:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr4a743w7m25 2026-07-20 22:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4eyfbiel2e...

CVE-2026-60027

creationtimestamp| type| source ---|---|--- 2026-07-20 21:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4a5lmfox2q...

CVE-2026-60030

creationtimestamp| type| source ---|---|--- 2026-07-20 21:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr47vvpj5n2o...

CVE-2026-53595

creationtimestamp| type| source ---|---|--- 2026-07-20 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr45zei2rd2u 2026-07-20 21:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4c4cmak22e 2026-07-20 22:00:43+00:00| seen|...

GHSA-499R-G7PC-VMP9

creationtimestamp| type| source ---|---|--- 2026-07-20 20:32:00+00:00| seen| https://gist.github.com/alon710/4520df6a85d072915e787e3825f8e5ef...

CVE-2026-61425

creationtimestamp| type| source ---|---|--- 2026-07-20 19:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42rnsk3j2r 2026-07-20 21:02:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46wcuhar2e...

CVE-2026-42168

creationtimestamp| type| source ---|---|--- 2026-07-20 19:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42o37kk22a...

CVE-2026-27409

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr42kn3nrv2j 2026-07-21 05:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr543jkhw32u 2026-07-21 15:44:10+00:00| seen|...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k 2026-09-05 13:00:04+00:00| published-proof-of-concept| Telegram/EWyzaOudgwaNXoA105LhIEanQUj5hipt6FRZ98nQPfTHQ 2026-09-06 00:00:46+00:00|...

CVE-2025-51677

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kiwv652v...

GHSA-JHMP-MQWM-3GQ8

creationtimestamp| type| source ---|---|--- 2026-07-20 19:31:55+00:00| seen| https://gist.github.com/alon710/406a76bb8aa1f3068e2e86792c104d53...

EUVD-2026-46080

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

CVE-2026-44230

RT (Request Tracker) contains a reflected Cross‑Site Scripting (XSS) vulnerability in search results/chart rendering. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 are affected if an authenticated user is induced to visit a crafted URL, enabling arbitrary ...