112220 matches found
CVE-2026-12209
creationtimestamp| type| source ---|---|--- 2026-06-15 04:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocg6l5xlt27...
CVE-2026-12204
creationtimestamp| type| source ---|---|--- 2026-06-15 04:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocfmoby2d2m...
CVE-2026-50888
An authenticated Server-Side Request Forgery SSRF in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via supplying a crafted URL...
PT-2026-49185
Name of the Vulnerable Software and Affected Versions WP MAPS PRO versions prior to 6.1.1 Description The plugin registers an unauthenticated AJAX action that allows the creation of an administrator account. By providing a valid nonce, which is publicly available on any frontend page that enqueue...
PT-2026-49328
Name of the Vulnerable Software and Affected Versions shlink version 5.0.1 Description A Server-Side Request Forgery SSRF exists in the automatic short URL title resolution component. This allows attackers to scan internal resources by providing a crafted longUrl variable. Recommendations At the...
GeoVision LPC2011/LPC2211 Web Interface / ssi.cgi reflected cross-site scripting (XSS) vulnerabilities
Summary Multiple exploitable reflected cross-site scripting XSS vulnerabilities exist in the Web Interface / ssi.cgi functionality of LPC2011/LPC2211 versions: 1.10. A specially crafted malicious url can lead to an arbitrary javascript code execution. An attacker can provide a crafted URL to...
CVE-2026-50887
The provided documents confirm a Server-Side Request Forgery (SSRF) vulnerability in shlink v5.0.1. The flaw resides in the automatic short URL title resolution component and is exploitable by supplying a crafted longUrl, enabling an attacker to scan internal resources. No concrete remediation de...
PT-2026-49570
Name of the Vulnerable Software and Affected Versions Python-Multipart versions prior to 0.0.30 Description The QuerystringParser treated the semicolon ; as a field separator in application/x-www-form-urlencoded bodies, in addition to the ampersand &. This deviates from the WHATWG URL standard,...
PT-2026-49596
Name of the Vulnerable Software and Affected Versions starlette versions prior to 1.3.1 Description The HTTP request path is not validated before being used to reconstruct request.url. When a path does not begin with /, such as @google.com, it is concatenated as scheme://hostpath. This shifts the...
CVE-2026-12190
A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment...
CVE-2026-53470
creationtimestamp| type| source ---|---|--- 2026-06-14 23:16:13+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvmpno5q2m 2026-06-15 16:31:52+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpi4b34v2k 2026-06-18 10:07:09+00:00| seen|...
CVE-2026-12190 Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme
A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment...
CVE-2026-12190
The CVE-2026-12190 entry concerns Genspark AI Workspace App version 2.8.4 on Android, affecting the ai.mainfunc.genspark component. The issue is described as improper authorization in the handler for a custom URL scheme, with exploitation limited to a local environment. The provided documents do ...
CVE-2026-49766
creationtimestamp| type| source ---|---|--- 2026-06-14 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moau3nmx7b2y 2026-06-15 21:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moebgpamvg2e 2026-06-16 05:01:09+00:00| seen|...
CVE-2026-48748
creationtimestamp| type| source ---|---|--- 2026-06-14 12:04:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moaq36mskk23 2026-06-16 00:56:16+00:00| seen| https://gist.github.com/alon710/bc7929d92c51f42ce9344791ed6ca313...
openSUSE 16 Security Update : mariadb (openSUSE-SU-2026:20933-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20933-1 advisory. This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass bsc1259176. -...
SUSE SLES12 Security Update : mutt (SUSE-SU-2026:2300-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2300-1 advisory. This update for mutt fixes the following issues - CVE-2026-43859: strfcpy used instead of memcpy for the IMAP authcram MD5 digest bsc1263897. -...
CVE-2025-55651
creationtimestamp| type| source ---|---|--- 2026-06-13 22:40:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7d5f3gem2r...