41627 matches found
CVE-2026-7857
creationtimestamp| type| source ---|---|--- 2026-05-05 22:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56snv3fo2h...
GHSA-WP38-WHX3-XFFH AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass
Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metadata hosts e.g. http://127.0.0.1:8080/..., http://169.254.169.254/latest/..., RFC1918 addresses. When any other user including a second account owned by the same attacker...
AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass
Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metadata hosts e.g. http://127.0.0.1:8080/..., http://169.254.169.254/latest/..., RFC1918 addresses. When any other user including a second account owned by the same attacker...
CVE-2026-35453
creationtimestamp| type| source ---|---|--- 2026-05-05 21:34:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55bhnfo42e...
EUVD-2026-27430
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...
CVE-2025-70067
creationtimestamp| type| source ---|---|--- 2026-05-05 21:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml54lzltxc2s...
CVE-2026-36365
creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ep5r6g2n...
CVE-2026-34459
creationtimestamp| type| source ---|---|--- 2026-05-05 20:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52zvt5hk2i 2026-05-06 05:36:40+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows...
GHSA-37W4-HWHX-4RC4 JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request
The allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab prior to 4.5.7. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This has security implications for deployments...
CVE-2026-39383 Gotenberg unauthenticated blind SSRF via unfiltered webhook URL
Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker with network access can force the server to make outbound HTTP POST requests to arbitrary internal or external destinations by supplying a crafted URL in the Gotenberg-Webhook-Url request header. Th...
CVE-2026-44570
creationtimestamp| type| source ---|---|--- 2026-05-05 20:34:23+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-hmjq-crxp-7rjw 2026-05-21 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmd4spw3fu2w...
YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`
Issue Details: YAFNET's only admin authorization gate is PageSecurityCheckAttribute, implemented as a ResultFilterAttribute that runs after the page handler completes rather than before it. No other gate exists. Any admin OnPost… handler therefore executes its side effects before the filter...
CVE-2026-7719
A security flaw has been discovered in Totolink WA300 5.2cu.7112B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument httphost results in buffer overflow. The attack may be launched...
CVE-2026-42027
creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z5cnhi52s...
CVE-2026-32699
FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...
CVE-2026-7854
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...
CVE-2026-32699 FacturaScripts unauthorized modification of immutable nick field via EditUser controller
FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...
EUVD-2026-27438
FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...
CVE-2026-32699
FacturaScripts (versions ≤ 2025.92) exposes a vulnerability in the EditUser endpoint where the nick field is not validated on POST, allowing an attacker to modify an immutable nickname by intercepting and altering form-data. The UI prevents editing this field, but a modified request can rename an...
CVE-2026-32699
FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...