Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

CVE-2026-8885

creationtimestamp| type| source ---|---|--- 2026-06-03 05:15:50+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnee4piqoh2c...

CVE-2026-9722

creationtimestamp| type| source ---|---|--- 2026-06-03 02:59:51+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mne4jjtzad2t 2026-06-03 08:15:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mneo5tab5z27...

CVE-2026-7195

creationtimestamp| type| source ---|---|--- 2026-06-02 16:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncxos2hkz2j 2026-06-03 01:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndvu3euez2q...

CVE-2026-39551

creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncq57sabd27 2026-06-03 06:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmrltjg2h...

CVE-2026-10293

creationtimestamp| type| source ---|---|--- 2026-06-01 23:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbbrihf4g2f...

CVE-2026-0826

creationtimestamp| type| source ---|---|--- 2026-06-01 15:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnagtc27vi26 2026-06-02 02:10:54+00:00| seen| https://bsky.app/profile/vritrasecnews.bsky.social/post/3mnbjd3riw42f 2026-06-02 14:45:24+00:00| seen|...

CVE-2026-39828

creationtimestamp| type| source ---|---|--- 2026-06-01 15:36:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y...

CVE-2026-40548

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543...

Malicious code in @redhat-cloud-services/frontend-components-config (npm)

Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...

CVE-2026-49267

creationtimestamp| type| source ---|---|--- 2026-05-31 12:43:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5lqqqiav2d...

CVE-2026-10161

creationtimestamp| type| source ---|---|--- 2026-05-31 04:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ojejwhd2p 2026-05-31 05:07:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4sa7hfif2p 2026-05-31 06:55:37+00:00| seen|...

CVE-2026-9809

creationtimestamp| type| source ---|---|--- 2026-05-31 00:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4b4rdrz42r...

CVE-2026-44543

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5qtmgk2e 2026-05-28 19:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwskzrhml2t...

CVE-2026-9997

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9992

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-48155

creationtimestamp| type| source ---|---|--- 2026-05-28 17:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwk6k2inb2p...

CVE-2026-7651

creationtimestamp| type| source ---|---|--- 2026-05-28 11:36:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwmcmx7t2q...

CVE-2026-9802

creationtimestamp| type| source ---|---|--- 2026-05-28 07:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjuuir7f2p...

CVE-2026-7533

creationtimestamp| type| source ---|---|--- 2026-05-28 07:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvizyjvor2p...