PYSEC-2026-2997 pyload-ng has a WebUI JSON permission mismatch that lets ADD/DELETE users invoke MODIFY-only actions

Summary Several WebUI JSON endpoints enforce weaker permissions than the core API methods they invoke. This allows authenticated low-privileged users to execute MODIFY operations that should be denied by pyLoad's own permission model. Confirmed mismatches: - ADD user can reorder packages/files...

PYSEC-2026-3410 vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

Summary A Server Side Request Forgery SSRF vulnerability in downloadbytesfromurl allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target...

JupyterLab vulnerable to potential authentication and CSRF tokens leak

ImpactUsers of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server version. PatchesJupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched. WorkaroundsNo workaround has been identified, however users...

PYSEC-2026-2534 JupyterLab vulnerable to potential authentication and CSRF tokens leak

Impact Users of JupyterLab who click on a malicious link may get their Authorization and XSRFToken tokens exposed to a third party when running an older jupyter-server version. Patches JupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched. Workarounds No workaround has been identified, however users...

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

CVE-2026-9824

creationtimestamp| type| source ---|---|--- 2026-07-13 13:19:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrszmrjk2s 2026-07-13 14:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuaxgcny27 2026-07-13 18:19:38+00:00| seen|...

GHSA-C7HR-448W-65PX

creationtimestamp| type| source ---|---|--- 2026-07-13 13:00:04+00:00| seen| https://t.me/poxek/6193 2026-07-14 00:00:48+00:00| published-proof-of-concept| https://t.me/poxek/6193...

CVE-2026-61976

creationtimestamp| type| source ---|---|--- 2026-07-13 12:09:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnulvaea2f 2026-07-13 13:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjswlvtwy2k 2026-07-13 15:44:34+00:00| seen|...

CVE-2026-61952

creationtimestamp| type| source ---|---|--- 2026-07-13 12:06:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnq45wys2i 2026-07-13 22:18:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkpwprsmj2z 2026-07-16 07:58:36+00:00| seen|...

CVE-2026-61975

creationtimestamp| type| source ---|---|--- 2026-07-13 11:38:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm5r5slr2x 2026-07-13 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtubhnlx2z 2026-07-14 03:05:32+00:00| seen|...

CVE-2026-57727

creationtimestamp| type| source ---|---|--- 2026-07-13 11:31:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlra6xoo2c 2026-07-16 07:57:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr7btoi22y...

CVE-2026-57741

creationtimestamp| type| source ---|---|--- 2026-07-13 11:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjlhebvkm2y...

CVE-2026-57702

creationtimestamp| type| source ---|---|--- 2026-07-13 11:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkvqdtb32w 2026-07-14 01:45:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3hzwcvj2w 2026-07-14 01:45:28+00:00| seen|...

CVE-2026-22103

creationtimestamp| type| source ---|---|--- 2026-07-13 11:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjks5gs2y22 2026-07-13 18:51:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkedkds2q2y 2026-07-14 03:06:16+00:00| seen|...

CVE-2026-57810

creationtimestamp| type| source ---|---|--- 2026-07-13 11:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkqku2ti25 2026-07-13 17:09:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqk6ohkb7p2q 2026-07-13 17:10:18+00:00| seen|...

CVE-2026-22095

creationtimestamp| type| source ---|---|--- 2026-07-13 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkkxda4q2v 2026-07-13 17:50:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkawmzfkt2e 2026-07-14 03:06:01+00:00| seen|...

CVE-2026-57372

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjki53kpu2c 2026-07-13 18:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkersqb2a2w...

CVE-2026-22093

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkhgrukm2t 2026-07-13 17:49:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkavfwvjs2y 2026-07-14 03:05:48+00:00| seen|...

CVE-2026-57388

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkcfpmde2e 2026-07-16 07:56:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5dxfdi2y...

CVE-2026-57376

creationtimestamp| type| source ---|---|--- 2026-07-13 11:03:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjk7x7nku2f 2026-07-16 07:56:09+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr4xobay2y...