23418 matches found
CVE-2026-4639
creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtjzaysb2e 2026-03-24 06:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhryra3c622d 2026-06-14 03:07:09+00:00| seen|...
GHSA-3QWQ-Q9VM-5J42 Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
EUVD-2026-14664
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
Spring Cloud Config Server: Path Traversal via Profile Parameter Allows Arbitrary File Access
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
CVE-2026-4738
creationtimestamp| type| source ---|---|--- 2026-03-24 03:17:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4738 2026-03-24 07:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrztxgbz72x...
CVE-2026-33298
creationtimestamp| type| source ---|---|--- 2026-03-24 01:30:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrggxqa7o24 2026-03-29 12:49:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116312542559416913...
CVE-2026-22739
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
CVE-2026-4675
creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260324 2026-03-24 02:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrj2d7hcn2p 2026-03-24 02:47:06+00:00|...
CVE-2026-33046
creationtimestamp| type| source ---|---|--- 2026-03-24 00:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrdc4ijxv24...
CVE-2026-2412
creationtimestamp| type| source ---|---|--- 2026-03-24 00:21:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrckrflii2d...
CVE-2026-4056
creationtimestamp| type| source ---|---|--- 2026-03-24 00:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrcescxmk2r...
CVE-2026-22739
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
CVE-2026-22739 Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
CVE-2026-22739 Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...
CVE-2026-22739
Spring Cloud Config Server with native-file-system backend is vulnerable to an issue in profile substitution that can cause access to files outside configured search directories, leading to potential SSRF/unauthorized file reads. Affected lines: Spring Cloud 3.1.x before 3.1.13; 4.1.x before 4.1....
PT-2026-27369
Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile list endpoint. Attackers can inject SQL code via the up cast, s mother, and s religion parameters to extract sensitive database information...
Discourse Information Disclosure Vulnerability (CNVD-2026-17478)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that originates from the disclosure of a user's hidden profile information...
Langflow 路径遍历漏洞
Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Versions of Langflow prior to 1.7.1 contained a path traversal vulnerability. This vulnerability stemmed from the lack of strict parameter filtering for the...
Zeeways Matrimony CMS SQL注入漏洞
Zeeways Matrimony CMS is a wedding and dating website building system developed by Zeeways Corporation. Zeeways Matrimony CMS has a SQL injection vulnerability. This vulnerability stems from multiple SQL injections at the profilelist endpoint, which may allow unauthenticated attackers to manipula...
PT-2026-27630
Name of the Vulnerable Software and Affected Versions PinchTab versions prior to 0.8.5 Description PinchTab, a standalone HTTP server for controlling a Chrome browser with AI agents, contains a Windows-only command injection issue within the orphaned Chrome cleanup path. The issue arises because...