111107 matches found
EUVD-2026-45187
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
CVE-2026-8075
creationtimestamp| type| source ---|---|--- 2026-07-17 14:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtx6yqf4f2q...
CVE-2024-23567
HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...
CVE-2026-22104
creationtimestamp| type| source ---|---|--- 2026-07-17 14:13:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwoapfly2x...
CVE-2024-23567
creationtimestamp| type| source ---|---|--- 2026-07-17 13:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtvtei6qc2e...
CVE-2026-15904
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:32:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942644743608855 2026-07-20 04:45:51+00:00| seen|...
CVE-2026-15903
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:58:55+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942748712137836 2026-07-19 11:01:06+00:00| seen|...
CVE-2026-15900
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:30:27+00:00| seen|...
CVE-2026-9592
SEPPmail Secure Email Gateway & SEPPmail Cloud prior to 15.0.4.2 are vulnerable. The issue arises because the session token is disclosed in the URL and an HTTP header within the GINA web portal, allowing an attacker to replay and hijack a user session. Affected component: GINA web portal session ...
SUSE-SU-2026:3104-1 Security update for python311
This update for python311 fixes the following issues - CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host bsc1261969. - CVE-2026-4786: URLs containing %action can bypass mitigation that allows command injection via the webbrowser.open API bsc1262319. -...
CVE-2026-16016
A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...
EUVD-2026-45172
A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...
CVE-2026-16016 poco-ai poco-claw task.py run_task server-side request forgery
A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...
CVE-2024-23567
HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...
CVE-2026-15943
A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing...
CVE-2026-15943 Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing...
CVE-2026-15943 Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing...
CVE-2026-15943
A vulnerability in Keycloak's keycloak-services component affects identity provider management. When a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value, the system performs improper validation and reuses the existing real secret even if fields ...