CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15628 zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery

A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function Vision.downloadtodataurl of the file agent/tools/vision/vision.py of the component Vision Tool. Performing a manipulation of the argument image results in server-side request...

CVE-2026-57856

creationtimestamp| type| source ---|---|--- 2026-07-14 02:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6yqzdqc2k...

CVE-2026-57855

creationtimestamp| type| source ---|---|--- 2026-07-14 02:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6pslbe62e...

CVE-2026-0487

creationtimestamp| type| source ---|---|--- 2026-07-14 02:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6443nz72x...

CVE-2026-15621

creationtimestamp| type| source ---|---|--- 2026-07-14 02:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql4dwovse27...

CVE-2026-44771

creationtimestamp| type| source ---|---|--- 2026-07-14 01:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3n7l5ug2w...

CVE-2026-57705

creationtimestamp| type| source ---|---|--- 2026-07-14 01:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3ivgsst2a 2026-07-16 08:16:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsbulbeg2b...

CVE-2026-44759

creationtimestamp| type| source ---|---|--- 2026-07-14 01:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3g6rvz52z...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-57706

creationtimestamp| type| source ---|---|--- 2026-07-14 01:32:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2rjvtom2y 2026-07-16 08:16:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsb3ykkt24...

CVE-2026-57365

creationtimestamp| type| source ---|---|--- 2026-07-14 01:21:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql24xxq5326 2026-07-16 08:15:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsa2rm2x2i...

CVE-2026-15621

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

CVE-2026-44745

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...

CVE-2026-15557

creationtimestamp| type| source ---|---|--- 2026-07-14 01:15:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzsyepf42x...

CVE-2026-57368

creationtimestamp| type| source ---|---|--- 2026-07-14 01:13:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzppqya627 2026-07-16 08:15:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs7bq6c42t...