CVE-2025-7105

creationtimestamp| type| source ---|---|--- 2026-06-25 18:00:52+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp4z4xmveg2a...

CVE-2026-46611

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server glances -s, implemented in glances/server.py does not validate the HTTP Host header, leaving it vulnerable to DNS rebinding attacks. An attacker can exploit DNS rebinding to exfiltrate the...

CVE-2024-11171

creationtimestamp| type| source ---|---|--- 2026-06-25 18:00:46+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp4z4qzesk2h...

CVE-2026-50016

creationtimestamp| type| source ---|---|--- 2026-06-25 17:59:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yzms5tm2j 2026-06-27 00:35:31+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hwx4-2j3j-g496 2026-06-30 00:41:03+00:00| seen|...

CVE-2026-49839

creationtimestamp| type| source ---|---|--- 2026-06-25 17:55:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yt3of422z...

CVE-2026-54679

creationtimestamp| type| source ---|---|--- 2026-06-25 17:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yq3qjse2o...

CVE-2026-50017

creationtimestamp| type| source ---|---|--- 2026-06-25 17:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j...

CVE-2018-12972

creationtimestamp| type| source ---|---|--- 2026-06-25 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4xsgtipk2h...

Security Bulletin: SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

Summary Langflow OSS versions = 1.9.3 contain SSRF vulnerability in legacy RSS Reader and SearXNG components that bypass SSRF protection introduced in v1.9.3. RSSReaderComponent calls requests.getself.rssurl directly on user input without validateurlforssrf check, completely bypassing protection...

CVE-2026-55412

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...

CVE-2026-55411

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.1780-lts, the authenticated endpoint POST /api/data-sources/decrypt returns the decrypted plaintext for any credential whose credentialid is supplied in th...

CVE-2026-9183

creationtimestamp| type| source ---|---|--- 2026-06-25 17:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4wmvxbmf2f...

CVE-2026-56445

creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:36+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsma-26-176-01 2026-06-25 21:15:02+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-176-01 2026-06-25 22:05:41+00:00| seen|...

CVE-2026-56414

creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:34+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-05 2026-06-27 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpacpui4i32p 2026-06-27 01:30:36+00:00| seen|...

CVE-2026-9718

creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-07...

CVE-2026-27366

creationtimestamp| type| source ---|---|--- 2026-06-25 17:14:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp4wjhseyg2h...

CVE-2026-54821

creationtimestamp| type| source ---|---|--- 2026-06-25 17:07:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp4w67bmw227 2026-06-30 00:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mphpxmac5a25...

MAL-2026-6466 Malicious code in gx-npm-feature-flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcad1b944d9ceb92389673398df9f471911a788fe608774a3298c69900bb1c7 [email protected] is a dependency-confusion squat max-semver 99.99.99 on a gx--prefixed name to outrank a private internal package that...

CVE-2026-55487

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locators. Approval for one source string could therefore authorize a different attacker-controlled source whose locator...

CVE-2026-55487 pnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized text from git, URL, tarball, file, and other opaque locators. Approval for one source string could therefore authorize a different attacker-controlled source whose locator...