76513 matches found
PT-2026-57165
The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can host a malicious web page that, when visited by an...
PT-2026-57324
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
PT-2026-57331
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...
CVE-2026-12598
creationtimestamp| type| source ---|---|--- 2026-07-09 23:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatkxb6dv26 2026-07-10 02:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2gy4ouu2i...
CVE-2026-12597
creationtimestamp| type| source ---|---|--- 2026-07-09 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatesas4f26 2026-07-10 02:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2grdnhv2c...
EUVD-2026-39007
Mistune: Potential DoS via quadratic-time parsing in parselinktext...
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. A relatively small input consisting of repeated characters causes significant parsing slowdown. Affected component mistune/inlineparser.py → parselinktext Description When parsing...
GHSA-QCQ2-496W-V96P Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. A relatively small input consisting of repeated characters causes significant parsing slowdown. Affected component mistune/inlineparser.py → parselinktext Description When parsing...
CVE-2026-59831
GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...
CVE-2026-8848
creationtimestamp| type| source ---|---|--- 2026-07-09 23:11:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqyjvs3y2d 2026-07-10 05:58:57+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbhrulgss2o...
CVE-2026-7558
creationtimestamp| type| source ---|---|--- 2026-07-09 23:10:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqxvy5mo2c...
CVE-2026-59269
creationtimestamp| type| source ---|---|--- 2026-07-09 23:09:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqupneqf2s 2026-07-10 03:34:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116893578077059959...
CVE-2026-31984
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...
CVE-2026-31981
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap3mupjq2d 2026-07-10 17:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp37tmox2d...
CVE-2026-14342
creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap2iz3s32s...
CVE-2026-12418
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoymz6fi2d...
CVE-2026-31983
creationtimestamp| type| source ---|---|--- 2026-07-09 22:34:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoxiphid2s 2026-07-10 17:27:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcobkhby62f...
CVE-2026-13450
creationtimestamp| type| source ---|---|--- 2026-07-09 22:32:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaotjnlbc2a 2026-10-14 17:07:59+00:00| seen| https://infosec.exchange/users/cve/statuses/117440359863233538...
CVE-2026-31982
creationtimestamp| type| source ---|---|--- 2026-07-09 22:31:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaorjqils2e 2026-07-10 17:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoa34a5y2y...