122994 matches found
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2026-90769
Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2026-90616
creationtimestamp| type| source ---|---|--- 2026-09-13 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263264954155475 2026-09-13 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvffb6fut32p...
CVE-2026-89650
creationtimestamp| type| source ---|---|--- 2026-09-13 10:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfeooeopg2t 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89643
creationtimestamp| type| source ---|---|--- 2026-09-13 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfe4qjakb22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89767
creationtimestamp| type| source ---|---|--- 2026-09-13 10:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfdlik3fj2m...
CVE-2026-89763
creationtimestamp| type| source ---|---|--- 2026-09-13 09:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfabhoq722w 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89555
creationtimestamp| type| source ---|---|--- 2026-09-13 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfa7moybf2g 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89771
creationtimestamp| type| source ---|---|--- 2026-09-13 08:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvf4uqjbvd2s 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89526
creationtimestamp| type| source ---|---|--- 2026-09-13 08:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvf4udz46p2p 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
Malicious code in hideorg-lvl (npm)
Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis ead8b3662c808468abcb65cf3b14e15d072c5a55ab367208aa9d43279d39e353 The OpenSSF Package Analysi...
CVE-2026-90486
creationtimestamp| type| source ---|---|--- 2026-09-13 00:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ypdrczywuxdh...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2024-004029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-004029 advisory. A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. AddType and similar configuration,...
CVE-2026-21087
creationtimestamp| type| source ---|---|--- 2026-09-12 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdwp2mc572j...
CVE-2026-90558
creationtimestamp| type| source ---|---|--- 2026-09-12 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvdplvyo2r2w 2026-09-12 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrczd6r322 2026-09-12 20:07:06+00:00| seen|...
thingsboard v4.3.1.5
All-in-one IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Gettin...
CVE-2026-87888
creationtimestamp| type| source ---|---|--- 2026-09-12 18:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdnxdo47g2m...