CVE-2026-49493

creationtimestamp| type| source ---|---|--- 2026-06-05 19:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkt5o35st2s 2026-06-05 19:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkwbfulzw2d...

CVE-2026-0481

creationtimestamp| type| source ---|---|--- 2026-05-15 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mluiq5544h22 2026-05-15 04:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116576710004603324...

CVE-2018-25315

creationtimestamp| type| source ---|---|--- 2026-04-29 20:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxb5lkax2p 2026-04-29 21:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknz2nt7n42i...

CVE-2026-24158

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtladrmcr27 2026-03-24 22:05:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlgbyilp2d 2026-03-24 22:54:15+00:00| seen|...

CVE-2026-32317

creationtimestamp| type| source ---|---|--- 2026-03-20 20:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjcm2nym42t 2026-03-20 21:26:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhjhfdsqvp2u 2026-03-20 22:23:54+00:00| seen|...

CVE-2025-70237

creationtimestamp| type| source ---|---|--- 2026-03-04 17:13:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgarsx3mlr2n 2026-03-04 17:14:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgartowgvs2s...

CVE-2026-0754

creationtimestamp| type| source ---|---|--- 2026-03-03 04:05:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vc3hhpa2v 2026-03-03 04:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vkzvqvk2e...

PYSEC-2026-2181

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to server-side request forgery. Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of...

CVE-2020-37178

creationtimestamp| type| source ---|---|--- 2026-02-12 10:15:32+00:00| seen| https://bsky.app/profile/hbrks.mastodon.social.ap.brid.gy/post/3menr4be24ga2 2026-02-12 10:16:26+00:00| seen| https://bsky.app/profile/hbrks.mastodon.social.ap.brid.gy/post/3menr5yntlwt2...

CVE-2024-22262

CVE-2024-22262 concerns Spring Framework URL parsing via UriComponentsBuilder, where parsing an externally supplied URL and validating its host may enable an open redirect or an SSRF if used after validation. Connected advisories reiterate the same input pattern and tie the CVE to Spring Web depe...

Open Redirect

express is vulnerable to Open Redirect. The vulnerability is due to improper handling of user-provided URLs during redirection in Express.js, which performs encoding using the encodeurl library before passing it to the 'location' header. It allows bypass of an improperly implemented allow lists a...

CVE-2024-22259

Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF...