112220 matches found
Server-side Request Forgery (SSRF)
Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via a parser differential between the strict WHATWG URL parser used for allowlist validation and the lenient Domino URL parse...
@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass
An issue in the @angular/platform-server package allows remote attackers to bypass host allowlist constraints and direct server-side outgoing requests to arbitrary external endpoints. This occurs due to a parser differential between the strict WHATWG URL parser used for allowlist validation and t...
GHSA-XRXM-CP7J-8XF6 @angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass
An issue in the @angular/platform-server package allows remote attackers to bypass host allowlist constraints and direct server-side outgoing requests to arbitrary external endpoints. This occurs due to a parser differential between the strict WHATWG URL parser used for allowlist validation and t...
CVE-2016-20079
creationtimestamp| type| source ---|---|--- 2026-06-15 16:23:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modozdldff2z...
CVE-2026-12161
creationtimestamp| type| source ---|---|--- 2026-06-15 16:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12161 2026-06-16 03:47:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moevbbfxz62m 2026-06-17 06:00:26+00:00| seen|...
CVE-2026-5233
creationtimestamp| type| source ---|---|--- 2026-06-15 16:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modo5vhfge2v...
CVE-2016-20083
creationtimestamp| type| source ---|---|--- 2026-06-15 16:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnvw3mdy2v...
CVE-2016-20080
creationtimestamp| type| source ---|---|--- 2026-06-15 15:59:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnoxg3kl2a...
CVE-2026-49064
creationtimestamp| type| source ---|---|--- 2026-06-15 15:57:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modnls2hnp2a 2026-06-15 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moe36a2mb42i...
CVE-2026-3375
creationtimestamp| type| source ---|---|--- 2026-06-15 15:38:06+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3modmiexfw62m...
CVE-2026-8683 Overly long URLs crash the Mattermost Desktop App
Mattermost Desktop App versions =6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID:...
CVE-2026-34024
creationtimestamp| type| source ---|---|--- 2026-06-15 13:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modensuage2e...
CVE-2026-12057
creationtimestamp| type| source ---|---|--- 2026-06-15 13:12:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modeeugzcs2e 2026-06-15 17:12:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3modrs32ria2v 2026-06-15 20:00:58+00:00| seen|...
CVE-2026-8386
creationtimestamp| type| source ---|---|--- 2026-06-15 11:52:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mod7vq67zq2d 2026-07-16 12:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8386.yaml 2026-07-17...
Cross-site Scripting
Nuxt is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation of URL schemes in the component, where attacker-controlled values supplied to the to or href props can contain javascript: or vbscript: URLs that are rendered directly into the underlying element,...
CVE-2026-49776
creationtimestamp| type| source ---|---|--- 2026-06-15 10:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mod2iseygx2o 2026-06-15 21:36:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeajewr3o2h 2026-06-16 01:01:09+00:00| seen|...
CVE-2026-12223
creationtimestamp| type| source ---|---|--- 2026-06-15 08:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocukowlju2p 2026-07-23 12:11:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsoohd7i2j...
CVE-2026-8935
The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...
CVE-2026-8935 Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...