66045 matches found
CVE-2026-5936 Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints e.g., cloud metadata services, or bypass...
CVE-2026-25205
creationtimestamp| type| source ---|---|--- 2026-04-13 05:45:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mje5zn6par27 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE...
CVE-2026-6148
creationtimestamp| type| source ---|---|--- 2026-04-13 03:16:54+00:00| published-proof-of-concept| Telegram/KiQO6BzL2B4UMdSmpPVmdPz1IvqmoqW4UFsejAlxhN67Qrk 2026-04-13 05:34:48+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mje5foj4i22r...
CVE-2026-25204
creationtimestamp| type| source ---|---|--- 2026-04-13 02:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdtjoqwny2r...
Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions
A flaw was found in Node.js. The Node.js Permission Model, intended to restrict filesystem access, does not properly enforce read permission checks for the fs.realpathSync.native function. This vulnerability allows code operating under --permission with restricted --allow-fs-read flags to bypass...
VulnCheck KEV: CVE-2026-25187
Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the improper handling of symbolic links before accessing a file. This vulnerability allows attackers to write arbitrary files.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to write arbitrary files...
Microsoft Windows Link Following Vulnerability
Microsoft Windows contains a link following vulnerability that allows for privilege escalation...
VulnCheck KEV: CVE-2025-60710
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
CVE-2026-6130
creationtimestamp| type| source ---|---|--- 2026-04-12 23:15:15+00:00| published-proof-of-concept| Telegram/hilS-ssmivi8q1jRkIVKk8g--dsfivFEr3ZeZAGEjyA5lds 2026-04-13 02:02:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjdrjtah7c2r 2026-06-13 15:00:07+00:00|...
CVE-2026-6142
creationtimestamp| type| source ---|---|--- 2026-04-12 16:16:36+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-6142 2026-04-13 02:58:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdunould22r 2026-04-13 03:16:54+00:00|...
CVE-2019-25697
creationtimestamp| type| source ---|---|--- 2026-04-12 14:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckh7otop2x 2026-04-18 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjqchavael2o...
CVE-2019-25691
creationtimestamp| type| source ---|---|--- 2026-04-12 14:08:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjnmuo3a2m...
CVE-2026-6121
creationtimestamp| type| source ---|---|--- 2026-04-12 09:15:33+00:00| published-proof-of-concept| Telegram/AnUpMqGKHL7gSw3mJ6Q6LRCEGnGi-YEDZYixCHZvtVLhw 2026-04-12 09:40:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjc2owghu42r 2026-04-12 10:13:14+00:00| seen|...
CVE-2026-6118
creationtimestamp| type| source ---|---|--- 2026-04-12 06:55:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjbrghufuw2z 2026-04-12 17:43:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6118.yaml 2026-04-15...
CVE-2026-6117
creationtimestamp| type| source ---|---|--- 2026-04-12 06:50:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjbr5jgi5s2r...
CVE-2026-6111
creationtimestamp| type| source ---|---|--- 2026-04-12 06:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjbpfe66t72k...
CVE-2026-40491
creationtimestamp| type| source ---|---|--- 2026-04-12 06:08:33+00:00| published-proof-of-concept| https://github.com/wkentaro/gdown/security/advisories/GHSA-76hw-p97h-883f 2026-04-18 05:33:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqpo5uccj26...
GHSA-R5V8-C28H-F8R8 MetaGPT affected by server-side request forgery in metagpt/utils/common.py
A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.2. This impacts the function decodeimage of the file metagpt/utils/common.py. The manipulation of the argument imgurlorb64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit ha...
