112166 matches found
Improper Access Control
LangGraph Python SDK is vulnerable to Improper Access Control. The vulnerability is due to unsafe URL path construction using unsanitized user-supplied identifiers, where special characters in identifier values can alter the intended request path and target unintended resources, allowing attacker...
CVE-2026-55654
creationtimestamp| type| source ---|---|--- 2026-06-23 07:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwbexkdi2a...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi So...
CVE-2026-41523
creationtimestamp| type| source ---|---|--- 2026-06-23 02:37:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moweld2smf2l 2026-06-23 05:13:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mowndjk4ct2x...
CVE-2026-47155
creationtimestamp| type| source ---|---|--- 2026-06-23 01:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7pttdok2k...
CVE-2026-54232
creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j 2026-07-01 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x...
CVE-2026-48109
creationtimestamp| type| source ---|---|--- 2026-06-23 00:26:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5avfblh2o 2026-07-20 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2olcg7es2s 2026-07-22 14:54:29+00:00| seen|...
PT-2026-51607
Name of the Vulnerable Software and Affected Versions Poweradmin versions prior to 4.2.4 Poweradmin versions prior to 4.3.3 Description Poweradmin is a web-based DNS administration tool for PowerDNS server. The software uses the attacker-controlled HTTP HOST request header as the authoritative...
CVE-2026-54264
creationtimestamp| type| source ---|---|--- 2026-06-22 23:32:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow2atv7uv2q 2026-07-18 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwza72rln2m...
CVE-2026-50168
creationtimestamp| type| source ---|---|--- 2026-06-22 23:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow24eiu5p2q...
GHSA-35C4-RVC8-FRHM Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials
Summary The Budibase server route POST /api/attachments/:datasourceId/url packages/server/src/api/routes/static.ts is registered with only the recaptcha middleware. There is no authorized... middleware in the chain. The controller...
Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials
Summary The Budibase server route POST /api/attachments/:datasourceId/url packages/server/src/api/routes/static.ts is registered with only the recaptcha middleware. There is no authorized... middleware in the chain. The controller...
GHSA-JJ36-R9W3-3PFH Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials
The application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the recaptcha middleware and does not require authentication, table permission, datasource permission, or builde...
EUVD-2026-32587
Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata...
CVE-2026-56698 Nuxt - Cross-Site Scripting via navigateTo open Option
Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-side script execution. Attackers can supply javascript: URLs through the open parameter to execute arbitrary scripts in the application's origin when...
CVE-2026-56698 Nuxt - Cross-Site Scripting via navigateTo open Option
Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-side script execution. Attackers can supply javascript: URLs through the open parameter to execute arbitrary scripts in the application's origin when...
CVE-2026-56266 Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation. Unauthenticated attackers can bypass the internal-address blocklist using IPv6-mapped IPv4 addresses to reac...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
GHSA-7WWH-XCC3-9FCG Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module
Summary The PayPal webhook endpoint /extensions/paypal/webhook processes the PAYPAL-CERT-URL HTTP header without validation, allowing attackers to control server-side HTTP request destinations. Technical details: The /extensions/paypal/webhook endpoint processes incoming webhook requests and trus...