EUVD-2026-36581

A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setSettingInternal, bypassing the normal setSetting validation logic, including validatehomepage, which requires homepage...

CVE-2008-6586: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in gui/index.php in µTorrent uTorrent WebUI 0.315 allows remote attackers to 1 hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and 2 hijack the authentication of administrators...