75066 matches found
CVE-2026-50132 Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase
Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...
GHSA-4C8J-MGM4-QQVP Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
Summary The remark42 image proxy fetches an arbitrary remote URL and re-serves the response from remark42's own origin. The download path decides whether the fetched resource is an image by looking only at the Content-Type header the remote server claims — it never inspects the actual bytes. The...
CVE-2026-54557
creationtimestamp| type| source ---|---|--- 2026-06-26 19:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ns2ae3e2q...
CVE-2020-14332
creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...
CVE-2019-14846
creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...
CVE-2026-57231
creationtimestamp| type| source ---|---|--- 2026-06-26 18:42:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lwuwflj26 2026-06-27 10:46:02+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mpbbr7oncd2v 2026-06-29 12:05:52+00:00| seen|...
CVE-2025-32423
creationtimestamp| type| source ---|---|--- 2026-06-26 18:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lgngomo2c...
CVE-2026-47206
creationtimestamp| type| source ---|---|--- 2026-06-26 18:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7l5zmofk2i...
CVE-2025-32394
creationtimestamp| type| source ---|---|--- 2026-06-26 18:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kta7ha52p...
CVE-2026-13372
Devolutions Remote Desktop Manager versions 2026.2.5 through 2026.2.11 are vulnerable to a code execution flaw in the custom PowerShell VPN editor . The root cause is incorrect link resolution by display name , which allows an authenticated attacker with write access to a shared workspace to exec...
EUVD-2026-39832
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name...
CVE-2026-45406
creationtimestamp| type| source ---|---|--- 2026-06-26 18:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kk7bms52n 2026-06-30 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mphr55hvyv24...
CVE-2026-57667
creationtimestamp| type| source ---|---|--- 2026-06-26 18:10:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7k4qx6ij2n 2026-06-30 14:17:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpj6xloow725...
CVE-2026-56062
creationtimestamp| type| source ---|---|--- 2026-06-26 17:45:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ir7e2qm2q...
CVE-2026-57636
creationtimestamp| type| source ---|---|--- 2026-06-26 17:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hk7hsot2p 2026-06-30 09:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpio6yxn6w2v...
CVE-2026-56064
creationtimestamp| type| source ---|---|--- 2026-06-26 17:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hdoavy42r 2026-08-01 03:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrykizm3ud2r...
CVE-2026-56025
creationtimestamp| type| source ---|---|--- 2026-06-26 17:04:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp7ghccfyz26...
EUVD-2026-39791
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0...