40374 matches found
EUVD-2026-42298
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-59702 repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-59702
Summary: CVE-2026-59702 affects repomix. A server-side request forgery exists in POST /api/pack, where unauthenticated attackers can cause the server to fetch arbitrary URLs without proper validation. The endpoint accepts http://, https://, and file:// URLs and passes them to git clone, enabling ...
GHSA-W54J-7WPM-CRHJ
creationtimestamp| type| source ---|---|--- 2026-07-08 14:44:37+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e7yeusk2s...
CVE-2019-10663
creationtimestamp| type| source ---|---|--- 2026-07-08 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5dskju6a2g...
CVE-2026-56360
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...
CVE-2026-54061
creationtimestamp| type| source ---|---|--- 2026-07-08 14:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5cjezgt22z 2026-08-20 17:50:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsocbdbj2y 2026-08-20 18:35:03+00:00| published-proof-of-concept|...
CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...
CVE-2019-10660
creationtimestamp| type| source ---|---|--- 2026-07-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5ahbcwux2s...
CVE-2026-6818
creationtimestamp| type| source ---|---|--- 2026-07-08 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq57bpuwyo2p...
CVE-2026-57260
creationtimestamp| type| source ---|---|--- 2026-07-08 12:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq54c2bmsp26...
CVE-2025-14785
creationtimestamp| type| source ---|---|--- 2026-07-08 12:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq53wgqbtu2o 2026-07-09 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mq7ke5ocv22b...
CVE-2026-57257
creationtimestamp| type| source ---|---|--- 2026-07-08 12:15:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq53vdsdif2k...
CVE-2019-10656
creationtimestamp| type| source ---|---|--- 2026-07-08 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq53gdultz2k...
CVE-2026-57259
creationtimestamp| type| source ---|---|--- 2026-07-08 12:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq536mna3c26...
CVE-2026-57062
creationtimestamp| type| source ---|---|--- 2026-07-08 12:00:53+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq5337tlhh23 2026-07-10 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zhjevb2d...
CVE-2026-57253
creationtimestamp| type| source ---|---|--- 2026-07-08 11:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52uckjbj27...
CVE-2026-57248
creationtimestamp| type| source ---|---|--- 2026-07-08 11:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52rcsigj2i...