CVE-2026-6119 AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2026-6119

CVE-2026-6119 affects AstrBotDevs AstrBot up to version 4.22.1. The vulnerability is in the API Endpoint’s post_data.get function, enabling server-side request forgery (SSRF) and potentially allowing remote exploitation. Public exploits are noted, with PoC activity observed. The issue is acknowle...

CVE-2026-6119 AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function postdata.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2019-25712

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25712 2026-04-12 14:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclothsug2m...

CVE-2019-25710

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25710 2026-04-12 15:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcmsntnnf2o 2026-04-17 15:07:08+00:00| seen|...

CVE-2019-25708

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25708 2026-04-12 14:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclfuwc5p2g...

CVE-2019-25703

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25703 2026-04-12 14:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjts3lda2r...

CVE-2019-25706

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25706 2026-04-12 14:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck6lqblp2m...

CVE-2019-25705

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25705 2026-04-12 14:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckcqao5n23 2026-06-07 03:07:07+00:00| seen|...

CVE-2019-25707

creationtimestamp| type| source ---|---|--- 2026-04-12 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25707 2026-04-12 14:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjclxs2ktc2g...

Fedora 42 : trafficserver (2026-a157bd84c4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a157bd84c4 advisory. Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling...

Pachno 1.0.6 Stored Cross-Site Scripting

Summary Pachno is an open-source collaboration platform formerly known as The Bug Genie designed for team project management, issue tracking, and documentation. It offers a module-based, customizable environment for software development and team workflows, distributed under the Mozilla Public...

PT-2026-32172

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using...

AstrBot 代码问题漏洞

AstrBot is an open-source multi-platform LLM chatbot and development framework developed by AstrBot. Versions of AstrBot 4.22.1 and earlier contained code vulnerabilities. These vulnerabilities stemmed from improper handling of the postdata.get function in the API Endpoint component, which could...

PT-2026-32151

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post data.get of the component API Endpoint. Such manipulation leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be use...

CVE-2020-8497

creationtimestamp| type| source ---|---|--- 2026-04-11 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mjaqdolqjm2z...

Exploit for CVE-2025-66024

CVE-2025-66024: XWiki Blog Application home page vulnerable to...

Exploit for SQL Injection in Devcode Openstamanager

CVE-2025-69215: OpenSTAManager has an SQL Injection in the Sta...

CVE-2026-32146

creationtimestamp| type| source ---|---|--- 2026-04-11 16:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mja7sv2e4f2o 2026-04-14 11:16:55+00:00| seen| Telegram/-ctGArBxkphl-MxNFcCeUWXIJh7Segfx9XDjUoG-mXB9WRY...

CVE-2026-39866

creationtimestamp| type| source ---|---|--- 2026-04-11 16:00:04+00:00| seen| https://t.me/GithubRedTeam/79889 2026-04-11 19:00:14+00:00| published-proof-of-concept| Telegram/d7cUv5SX7AU8oNgWDOFyTXjUFAToUPLHssqeqx0UdNgpQQ 2026-04-21 02:24:51+00:00| seen|...