66055 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-11017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypas...
CVE-2024-27892
creationtimestamp| type| source ---|---|--- 2026-06-04 23:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnisq5n6hz25 2026-06-05 05:12:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnjeupitk72c...
CVE-2026-10870
creationtimestamp| type| source ---|---|--- 2026-06-04 23:31:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirtinq6s2b...
CVE-2026-42540
creationtimestamp| type| source ---|---|--- 2026-06-04 23:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirblpodl2n...
CVE-2026-11017
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-11017
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11322
creationtimestamp| type| source ---|---|--- 2026-06-04 23:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniqhz3vnc26...
CVE-2026-11017
CVE-2026-11017 affects Google Chrome/Chromium: Inappropriate implementation in Link Preview allows a renderer-compromised remote attacker to bypass navigation restrictions with a crafted HTML page. Debian/Chromium advisories fix the issue in Chromium/Chrome to 149.0.7827.53 (e.g., Debian: 149.0.7...
CVE-2026-11017
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11017
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11017
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-36499
creationtimestamp| type| source ---|---|--- 2026-06-04 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipr2mk7m2o...
CVE-2024-6858
creationtimestamp| type| source ---|---|--- 2026-06-04 22:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipigspj72x...
CVE-2026-46741
creationtimestamp| type| source ---|---|--- 2026-06-04 22:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnimqswez62p...
GHSA-GQ96-5PFX-F4VC Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation
Summary The /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against private/reserved ranges via FileUrlValidator, the linkURL flow only...
Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation
Summary The /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against private/reserved ranges via FileUrlValidator, the linkURL flow only...
Server-side Request Forgery (SSRF)
Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the external-link process. An attacker can access internal network resources and cloud metadata endpoints by...
Server-side Request Forgery (SSRF)
Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the external-link process. An attacker can access internal network resources and cloud metadata endpoints by supplying crafted URLs to the affected...