112173 matches found
CVE-2026-54186
creationtimestamp| type| source ---|---|--- 2026-06-17 14:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiipye73c2e...
Authorization Bypass Through User-Controlled Key
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the getimagebase64fromurl function. An attacker can access files belonging to other users by supplying a file identifier in the imageurl.url field that doe...
GHSA-WCH8-MHJ5-9FRG Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
summary POST /api/chat/completions accepts an imageurl.url value that, when it does NOT start with http://, https://, or data:image/, is interpreted as a file id and resolved against the global file table with no ownership check. An authenticated user can therefore set imageurl.url to another...
Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
summary POST /api/chat/completions accepts an imageurl.url value that, when it does NOT start with http://, https://, or data:image/, is interpreted as a file id and resolved against the global file table with no ownership check. An authenticated user can therefore set imageurl.url to another...
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
Summary The spreadsheet-import endpoint axiosRequestMake could be used as a generic HTTP proxy. Before the fix it was reachable unauthenticated, and its URL-extension allowlist was a regex tested against the full URL string, so URLs whose query string ended in .csv for example...
NPM: NocoDB: Server-Side Request Forgery via Base Migration URL
NPM: NocoDB: Server-Side Request Forgery via Base Migration URL vulnerability discovered by ? in WordPress Npm nocodb versions = 0.301.3...
NPM: NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
NPM: NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL vulnerability discovered by ? in WordPress Npm nocodb versions = 0.301.3...
CVE-2026-11858
creationtimestamp| type| source ---|---|--- 2026-06-17 13:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihmi6ezz2j...
CVE-2026-54803
creationtimestamp| type| source ---|---|--- 2026-06-17 13:52:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihiv5eir2v...
CVE-2026-7850
The WP Magnific Popup WordPress plugin through 1.0 does not properly escape user-controlled link URLs before injecting them into the DOM when displaying image load error messages, allowing authenticated attackers with Author-level access or above to perform Stored Cross-Site Scripting attacks...
CVE-2026-10839
Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users to malicious sites following login procedures or...
CVE-2026-46869
creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiayeen2k2g...
CVE-2026-48776
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource...
PYSEC-2026-2194
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource...
Cross-Site Scripting (XSS)
Vitest is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the otelCarrier query parameter being inserted directly into an inline module script and treated as JavaScript source rather than data, which allows an attacker to craft a malicious browser-runner URL and execute...
CVE-2026-0083
creationtimestamp| type| source ---|---|--- 2026-06-17 09:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moi2bl6fqh2f 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-0081
creationtimestamp| type| source ---|---|--- 2026-06-17 09:32:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohyyb5qpl2f 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-9570 Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline JavaScript on a frontend page containing one of its shortcodes, leading to a Reflected Cross-Site Scripting vulnerability that can be triggered against any logged-in user...
CVE-2026-35268
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 00:37:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mojlk4nsfv2z...
CVE-2026-46780
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpo2chtzut2s...