111914 matches found
PT-2026-54860
Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.0.0-RC1 through 4.17.9 Craft CMS versions 5.0.0-RC1 through 5.9.9 Description Control panel users with the utility:system-messages permission can embed a file-reading payload into system email templates because the dataUrl...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the HttpExecutor.prepareRedirectUrlOptions process. An attacker can obtain sensitive credentials, such as GitLab's PRIVATE-TOKEN or mixed-case Authorization headers, by leveraging a...
CVE-2026-52868
creationtimestamp| type| source ---|---|--- 2026-06-30 22:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3fqjp4i2z 2026-07-01 02:36:51+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...
CVE-2026-14123
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-50040 Cross-site Scripting in StoneFly Storage Concentrator
Storage Concentrator SC & SCVM is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an authenticated user, causes arbitrary script content to execute within the victim's browser...
CVE-2026-58449
creationtimestamp| type| source ---|---|--- 2026-06-30 22:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2bvcfe326 2026-07-02 20:45:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpovld6x432e...
CVE-2026-9132
creationtimestamp| type| source ---|---|--- 2026-06-30 22:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzthy3j42u...
CVE-2026-58450
Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated attackers to redirect authenticated victims to attacker-controlled external URLs by injecting a malicious value into the intended query parameter. Attackers can craft a...
CVE-2025-36319
creationtimestamp| type| source ---|---|--- 2026-06-30 22:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjznitshp23 2026-07-01 17:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm3dwjt4g2t...
CVE-2026-56233
Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy. Authenticated users with build permissions can bypass upload restrictions by appending traversal sequences to the upload path, which are normalized by the WHATWG URL parser, enabling access to internal admi...
CVE-2026-56224
Capgo: vulnerability in console.capgo.app/login prior to version 12.128.2 allows access_token and refresh_token to be accepted in URL query parameters, leading to automatic user authentication without user confirmation. Practically, an attacker can craft a malicious link that lures a victim into ...
CVE-2026-56224 Capgo - Login CSRF and Session Fixation via URL Query Parameters
Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...
CVE-2026-58447
creationtimestamp| type| source ---|---|--- 2026-06-30 22:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz2m5zsw2s 2026-07-03 10:05:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcc3wwhe27 2026-07-19 19:53:57+00:00| seen|...
CVE-2026-9106
creationtimestamp| type| source ---|---|--- 2026-06-30 21:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjyjnm3on24...
CVE-2025-12530
creationtimestamp| type| source ---|---|--- 2026-06-30 21:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjygswnxx2k 2026-07-01 18:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm6lpl47j2r 2026-07-02 01:36:48+00:00| seen|...
CVE-2026-10562
An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...
CVE-2026-58450
Invoice Ninja 5.13.26 contains an open redirect in the client portal login. An unauthenticated attacker can craft a login link with a malicious external URL in the intended parameter, which is stored in the user session without host validation and emitted verbatim via a bare redirect in ContactLo...
EUVD-2026-40410
An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...
CVE-2026-10562 Unauthenticated Open Redirect Vulnerability on TP-Link Archer AX20 Web Interface
An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...