Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the bytePlusDownloadVideo function. An attacker can access internal resources or perform unauthorized requests by supplying crafted values to the output.videourl argument. Remediation There is no fix...

CVE-2026-53364

creationtimestamp| type| source ---|---|--- 2026-07-14 03:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcqy52x52y 2026-07-16 08:21:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsk6jdkt2n 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-61505

creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...

CVE-2026-61502

creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc6vdxiy2s...

CVE-2026-15629

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...

EUVD-2026-43618

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15628 zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery

A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function Vision.downloadtodataurl of the file agent/tools/vision/vision.py of the component Vision Tool. Performing a manipulation of the argument image results in server-side request...

CVE-2026-57856

creationtimestamp| type| source ---|---|--- 2026-07-14 02:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6yqzdqc2k...

CVE-2026-57855

creationtimestamp| type| source ---|---|--- 2026-07-14 02:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6pslbe62e...

CVE-2026-0487

creationtimestamp| type| source ---|---|--- 2026-07-14 02:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6443nz72x...

CVE-2026-15621

creationtimestamp| type| source ---|---|--- 2026-07-14 02:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql4dwovse27...

CVE-2026-44771

creationtimestamp| type| source ---|---|--- 2026-07-14 01:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3n7l5ug2w...

CVE-2026-57705

creationtimestamp| type| source ---|---|--- 2026-07-14 01:45:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3ivgsst2a 2026-07-16 08:16:47+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsbulbeg2b...

CVE-2026-44759

creationtimestamp| type| source ---|---|--- 2026-07-14 01:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql3g6rvz52z...

CVE-2026-44768

creationtimestamp| type| source ---|---|--- 2026-07-14 01:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql37ztbex2l...

CVE-2026-57706

creationtimestamp| type| source ---|---|--- 2026-07-14 01:32:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2rjvtom2y 2026-07-16 08:16:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsb3ykkt24...