74724 matches found
CVE-2026-13696
creationtimestamp| type| source ---|---|--- 2026-07-07 15:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2w5cnpd52v...
GO-2026-5897 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder
Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder...
GO-2026-5881 goshs: Share-link ?token=… redemption races past download limit in goshs.de/goshs
goshs: Share-link ?token=… redemption races past download limit in goshs.de/goshs...
GO-2026-5883 KubeVirt has a Link Following issue in kubevirt.io/kubevirt
KubeVirt has a Link Following issue in kubevirt.io/kubevirt...
GO-2026-5848 KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt...
CVE-2026-53878
creationtimestamp| type| source ---|---|--- 2026-07-07 15:04:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2uvi6mb22w 2026-07-07 16:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2y6fbxvq23 2026-08-13 13:08:53+00:00| seen|...
CVE-2026-53877
creationtimestamp| type| source ---|---|--- 2026-07-07 15:04:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2uvi6mb22w 2026-07-07 16:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2yqc7v5w2x 2026-08-13 13:08:52+00:00| seen|...
ReDoS in giskard's transformation.py (GHSL-2024-324)
ReDoS in Giskard text perturbation detectorA Remote Code Execution ReDoS vulnerability was discovered in Giskard component by the GitHub Security Lab team. When processing datasets with specific text patterns with Giskard detectors, this vulnerability could trigger exponential regex evaluation...
PYSEC-2026-1408 gradio Server Side Request Forgery vulnerability
In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...
CVE-2019-16728
creationtimestamp| type| source ---|---|--- 2026-07-07 14:02:53+00:00| seen| https://gist.github.com/UltraRamy/b344c7471b63468d9b5bc7bd3f33c59c...
CVE-2026-54234
creationtimestamp| type| source ---|---|--- 2026-07-07 14:01:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq2rebevqb2j 2026-07-17 18:35:04+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f...
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence AI platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed WriteOut by the Sand...
CVE-2026-27823
creationtimestamp| type| source ---|---|--- 2026-07-07 13:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2op6co7e2i 2026-07-20 17:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3tzaqs2t27...
Server-Side Request Forgery in gradio
A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio and was discovered in version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is us...
PYSEC-2026-1509 langchain Server-Side Request Forgery vulnerability
With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...
Langchain Server-Side Request Forgery vulnerability
In Langchain before 0.0.329, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks...
PYSEC-2026-1969 TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link
Summary The torbot.modules.validators.validatelink function uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash using a well-crafted argument.. Details...
Zope vulnerable to Stored Cross Site Scripting with SVG images
ImpactThere is a stored cross site scripting vulnerability for SVG images.Note that an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the vulnerability, an attacker would first need to upload an image, and then trick a user...
CVE-2026-14868
creationtimestamp| type| source ---|---|--- 2026-07-07 11:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2i5wspmi2b 2026-07-14 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqnbgflw2623...