CVE-2026-48597

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-48597 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-48597 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-24237

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6flsf6b2u 2026-07-26 10:07:06+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrk54d2ppw23...

CVE-2026-24221

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6febj5d2q...

CVE-2026-47117

creationtimestamp| type| source ---|---|--- 2026-06-02 17:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd5hwnzk62l 2026-06-02 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbqpkwoj23 2026-08-17 18:00:05+00:00| seen|...

CVE-2026-45553

creationtimestamp| type| source ---|---|--- 2026-06-02 17:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd56y2qil2t 2026-06-02 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbr5fszz2f...

CVE-2026-48861

creationtimestamp| type| source ---|---|--- 2026-06-02 16:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd2xy373n2o 2026-07-10 00:35:21+00:00| published-proof-of-concept| https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v 2026-07-10 04:12:07+00:00|...

CVE-2026-35447

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-9844

creationtimestamp| type| source ---|---|--- 2026-06-02 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncysm7a7a2b...

CVE-2026-10181

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made...

CVE-2026-9726

creationtimestamp| type| source ---|---|--- 2026-06-02 15:58:23+00:00| seen| https://bsky.app/profile/thedroptimes.bsky.social/post/3mncxkppixd2h 2026-07-11 02:34:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmtyexzp2y...

CVE-2026-39555

creationtimestamp| type| source ---|---|--- 2026-06-02 15:44:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncwrhvdox2z 2026-06-03 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mne4l4jj2r2h...

CVE-2019-25719

creationtimestamp| type| source ---|---|--- 2026-06-02 15:36:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncwcpqgwu2t 2026-06-02 18:41:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mndap2xd352i...

CVE-2025-58707

creationtimestamp| type| source ---|---|--- 2026-06-02 15:33:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncw6lecr727 2026-06-02 18:42:44+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mndaqn3xab2w...

EUVD-2026-33925

NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting XSS vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint /index.php?route=/queries/user/. The application reflects user-supplied input from the id parameter into the HTML response...

CVE-2025-58705

creationtimestamp| type| source ---|---|--- 2026-06-02 13:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncoillocc2j 2026-06-04 08:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tqcloi2p...

CVE-2025-53440

creationtimestamp| type| source ---|---|--- 2026-06-02 13:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnco77fw722s 2026-06-03 07:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnejxj2l6m22 2026-06-03 11:39:39+00:00| seen|...

CVE-2026-8993

D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastructure and to conduct SSRF Server Side...

golang: net/url: Memory exhaustion in query parameter parsing in net/url

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...