112562 matches found
CVE-2026-44602
creationtimestamp| type| source ---|---|--- 2026-05-07 05:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlahose3q72t...
CVE-2026-41891
creationtimestamp| type| source ---|---|--- 2026-05-07 05:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlahjfoxve2e...
GHSA-C67R-GC9J-2QF7
creationtimestamp| type| source ---|---|--- 2026-05-07 05:10:29+00:00| seen| https://gist.github.com/alon710/536c02534caf441e3d6307e9b3c04050...
CVE-2016-7883
creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:09+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep7byzq2p...
CVE-2016-2212
creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:08+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep6hrzw2q...
CVE-2026-41413
CVE-2026-41413 affects Istio: when a RequestAuthentication jwksUri points to an internal resource, istiod makes unauthenticated HTTP GET requests without filtering localhost/link-local IPs, risking SSRF and data exposure to Envoy proxies via xDS. Patched in Istio 1.28.6 and 1.29.2; upgrade to tho...
GHSA-FQPH-J6V6-JVGX docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...
CVE-2026-41670
Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly from incoming SAML AuthnRequest messages as the destination for the SAML response, without validating it against the...
CVE-2026-41670
Admidio before 5.0.9 permits an attacker who knows a registered SP’s Entity ID to craft a SAML AuthnRequest with an attacker-controlled AssertionConsumerServiceURL, causing the IdP to send a signed SAML response containing user attributes to the attacker’s URL. The root cause is that ACS URL is t...
CVE-2026-41670 Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest
Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly from incoming SAML AuthnRequest messages as the destination for the SAML response, without validating it against the...
CVE-2026-41484
creationtimestamp| type| source ---|---|--- 2026-05-07 02:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6u4p7om2i...
CVE-2019-1905
creationtimestamp| type| source ---|---|--- 2026-05-07 02:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla5prthjg2v...
CVE-2026-40332
creationtimestamp| type| source ---|---|--- 2026-05-07 02:15:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla5i2suz72i...
GHSA-585V-HCGF-JHFR Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information
Summary The free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500...
Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information
Summary The free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the convertUrlRoute and screenshotUrlRoute processes. An attacker can access sensitive files belonging to other users' in-flight conversion requests by submitting specially crafted file:// URLs pointi...
CVE-2026-42083
creationtimestamp| type| source ---|---|--- 2026-05-07 01:15:21+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-6rgm-gr97-x3j5 2026-05-07 01:58:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6rgm-gr97-x3j5 2026-05-29...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the FilterOutboundURL process. An attacker can access internal network resources and retrieve sensitive information by exploiting DNS rebinding to bypass outbound URL filtering. This is only...