111056 matches found
CVE-2026-17534
Kimi Code fetch path FetchURL is vulnerable before 0.27.0: it hardens SSRF protection with a static hostname and IP-literal denylist in assertSafeFetchTarget but does not resolve DNS or re-validate after HTTP redirects. An attacker who can influence a FetchURL call (e.g., via prompt injection) ca...
CVE-2026-14957
creationtimestamp| type| source ---|---|--- 2026-07-27 08:30:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116991002509583973...
CVE-2026-48354
creationtimestamp| type| source ---|---|--- 2026-07-27 08:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmi5p2yhe27...
CVE-2026-14236
The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a Stripe checkout, allowing an unauthenticated attacker to redirect a victim, via a crafted link, to an arbitrary external site aft...
CVE-2026-64410
creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y...
CVE-2026-64392
creationtimestamp| type| source ---|---|--- 2026-07-27 06:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmarpnodf2s...
CVE-2026-64384
creationtimestamp| type| source ---|---|--- 2026-07-27 06:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmakkgqiq2z...
CVE-2026-64385
creationtimestamp| type| source ---|---|--- 2026-07-27 06:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmagzepio2j...
CVE-2026-64383
creationtimestamp| type| source ---|---|--- 2026-07-27 06:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmadhn6kl2v...
CVE-2026-64268
creationtimestamp| type| source ---|---|--- 2026-07-27 06:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrm7yq3mge2s 2026-08-06 04:48:04+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-14236
The CVE concerns the Contact Form 7 WordPress plugin (pre-2.5) failing to validate the host of a user-supplied return URL before using it as the success and cancel redirect targets for a Stripe checkout. Root cause: lack of host validation on the return URL enables an unauthenticated attacker to ...
PT-2026-65079
Name of the Vulnerable Software and Affected Versions Plack::App::Prerender versions prior to 0.3.0 Description An issue exists where the software can proxy requests to an arbitrary host due to unvalidated concatenation of the REQUEST URI in the call function. When the rewrite base is a plain...
IBM DB2 Remote Code Execution (7279479) (Unix)
According to its self-reported version number, IBM Db2 is affected by a remote code execution vulnerability: - IBM Data Server Driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control. CVE-2026-9762 Note that Nessus has not tested for this issue but has...
CVE-2017-11013
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:57+00:00| seen| https://t.me/KaitNews/6245 2026-07-27 00:01:39+00:00| seen| https://t.me/KaitNews/6245 2026-07-29 07:00:09+00:00| seen| https://t.me/KaitNews/6245 2026-07-30 00:03:11+00:00| seen| https://t.me/KaitNews/6245...
CVE-2017-5709
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:54+00:00| seen| https://t.me/KaitNews/6821 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6821 2026-07-29 05:00:05+00:00| seen| https://t.me/KaitNews/6821 2026-07-30 00:03:15+00:00| seen| https://t.me/KaitNews/6821...
gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL
A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clonefrom method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to...
CVE-2023-35642
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:17+00:00| seen| https://t.me/EchelonEyes/2269 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2269 2026-07-28 00:00:33+00:00| seen| https://t.me/EchelonEyes/2269...
GHSA-86CX-WWF4-PHQ4
creationtimestamp| type| source ---|---|--- 2026-07-25 15:32:47+00:00| seen| https://gist.github.com/alon710/341e4798332dfd78cba00be899ecacf7...