117905 matches found
CVE-2026-53486
creationtimestamp| type| source ---|---|--- 2026-07-06 21:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyzx5z4fr2x 2026-07-12 13:01:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqhadhd3v72m 2026-07-14 23:28:46+00:00| seen|...
CVE-2026-55727
creationtimestamp| type| source ---|---|--- 2026-07-06 21:28:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzuzlayu2c...
CVE-2026-43918
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked inactive, existing authenticated sessions are not invalidated. The session identity loaders in src/di.php loggedinclient and loggedinadmin...
CVE-2026-57573
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...
PYSEC-2026-2140
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...
CVE-2026-57571
Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...
CVE-2026-42341
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have an unauthenticated payment bypass vulnerability in FOSSBilling's IPN callback endpoint. When the Custom payment adapter is enabled, an attacker can mark any unpaid invoice as paid and credit...
CVE-2026-57321
creationtimestamp| type| source ---|---|--- 2026-07-06 21:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpyz4gr6gr2u...
CVE-2026-35366
creationtimestamp| type| source ---|---|--- 2026-07-06 21:12:12+00:00| seen| https://gist.github.com/alon710/07d450ac5289edebf7f986d4d73c3cf2...
CVE-2026-42331
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in other invoice-related endpoints, allowing an unauthenticated user with knowledge of an invoice hash to modify the...
CVE-2026-14898
creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...
CVE-2026-55798
creationtimestamp| type| source ---|---|--- 2026-07-06 20:46:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxjwnuh72v 2026-07-20 22:37:37+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6...
CVE-2026-54060
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...
GHSA-X76W-8C62-48MG
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:52+00:00| seen| https://gist.github.com/alon710/b825af035610849f3142d75d4e2989fc...
CVE-2026-59089
creationtimestamp| type| source ---|---|--- 2026-07-06 20:31:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywp3ducp2w...
CVE-2026-55379
creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...
CVE-2026-9182
creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...
CVE-2026-14898
The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image U...