116502 matches found
GHSA-287W-MXQ6-X2CP
creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...
CVE-2026-54496
creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fiw6dh2r 2026-07-17 19:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquibd7ypf22 2026-07-19 08:00:58+00:00| seen|...
CVE-2026-57572
creationtimestamp| type| source ---|---|--- 2026-07-06 21:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2bv4bh42x 2026-07-08 02:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3zvgxxvv25...
CVE-2026-57571
creationtimestamp| type| source ---|---|--- 2026-07-06 21:34:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz26euuhl2b 2026-07-06 23:11:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpz7m2dufn2t 2026-07-08 04:37:06+00:00| seen|...
GHSA-5493-9M76-2QRR
creationtimestamp| type| source ---|---|--- 2026-07-06 21:31:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpz22a66p72b...
CVE-2026-54760
creationtimestamp| type| source ---|---|--- 2026-07-06 21:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyzx77jwz2l 2026-07-10 02:47:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqb534o76s2x...
CVE-2026-53486
creationtimestamp| type| source ---|---|--- 2026-07-06 21:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyzx5z4fr2x 2026-07-12 13:01:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqhadhd3v72m 2026-07-14 23:28:46+00:00| seen|...
CVE-2026-55727
creationtimestamp| type| source ---|---|--- 2026-07-06 21:28:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzuzlayu2c...
CVE-2026-43918
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked inactive, existing authenticated sessions are not invalidated. The session identity loaders in src/di.php loggedinclient and loggedinadmin...
CVE-2026-57573
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...
PYSEC-2026-2140
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...
CVE-2026-57571
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...
CVE-2026-42341
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have an unauthenticated payment bypass vulnerability in FOSSBilling's IPN callback endpoint. When the Custom payment adapter is enabled, an attacker can mark any unpaid invoice as paid and credit...
CVE-2026-57321
creationtimestamp| type| source ---|---|--- 2026-07-06 21:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpyz4gr6gr2u...
CVE-2026-35366
creationtimestamp| type| source ---|---|--- 2026-07-06 21:12:12+00:00| seen| https://gist.github.com/alon710/07d450ac5289edebf7f986d4d73c3cf2...
CVE-2026-42331
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in other invoice-related endpoints, allowing an unauthenticated user with knowledge of an invoice hash to modify the...
CVE-2026-14898
creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...
CVE-2026-55798
creationtimestamp| type| source ---|---|--- 2026-07-06 20:46:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxjwnuh72v 2026-07-20 22:37:37+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6...
CVE-2026-54060
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...