112147 matches found
CVE-2026-12804
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is...
CVE-2026-56406
creationtimestamp| type| source ---|---|--- 2026-06-21 18:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosynwicm62o 2026-06-26 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncaeykp26 2026-07-21 12:01:21+00:00| seen|...
CVE-2026-12797
creationtimestamp| type| source ---|---|--- 2026-06-21 13:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosjb4hhbj2t...
CVE-2026-12787
creationtimestamp| type| source ---|---|--- 2026-06-21 11:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosctbnql62l...
CVE-2026-12787
A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...
EUVD-2026-38151
A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...
CVE-2024-8806
creationtimestamp| type| source ---|---|--- 2026-06-21 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mornpcbldq2a...
PT-2026-51258
Name of the Vulnerable Software and Affected Versions kortix-ai suna versions prior to 0.8.39 Description A weakness in the Auth Endpoint component allows for remote cross-site scripting XSS, which is a technique where malicious scripts are injected into trusted websites. The issue exists within...
CVE-2026-56228
creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...
CVE-2026-77111
creationtimestamp| type| source ---|---|--- 2026-06-20 20:32:39+00:00| seen| https://gist.github.com/elbakouchisamira61-bit/5d6b526ef00d36ec0158cd86cca2f16e...
CVE-2026-56330
creationtimestamp| type| source ---|---|--- 2026-06-20 20:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqp2fi5lq22 2026-06-21 13:11:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116788263084343961...
CVE-2026-56342
creationtimestamp| type| source ---|---|--- 2026-06-20 20:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqoozz66m22...
CVE-2026-56304
creationtimestamp| type| source ---|---|--- 2026-06-20 20:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqok5jmtt2f...
CVE-2026-56282
creationtimestamp| type| source ---|---|--- 2026-06-20 20:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqo23tp4i2w...
CVE-2025-71379
creationtimestamp| type| source ---|---|--- 2026-06-20 20:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqnpdswz622...
CVE-2026-56332
creationtimestamp| type| source ---|---|--- 2026-06-20 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqn5gwuvf2w...
CVE-2026-56276
creationtimestamp| type| source ---|---|--- 2026-06-20 19:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqmuihsev2i...
CVE-2026-56342
AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...
CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter
AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...