112638 matches found
CVE-2026-43873
creationtimestamp| type| source ---|---|--- 2026-04-25 00:46:54+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-qm9p-p5pw-jrx2 2026-05-12 05:38:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mln34ysrfi2t...
GHSA-H829-5CG7-6HFF
creationtimestamp| type| source ---|---|--- 2026-04-25 00:12:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkbqxhjzmlu2...
PT-2026-35154
A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...
CVE-2026-33666
creationtimestamp| type| source ---|---|--- 2026-04-24 21:49:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkbiykg5m32w...
PYSEC-2026-76
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...
PYSEC-2026-76
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...
CVE-2026-41488
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...
CVE-2026-41328
creationtimestamp| type| source ---|---|--- 2026-04-24 19:42:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbbw67je32f 2026-04-25 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116463463879285208 2026-04-25 04:30:31+00:00| seen|...
Improper Encoding or Escaping of Output
Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output through the encode function in AxiosURLSearchParams. An attacker can smuggle a NUL byte into serialized query strings by supplying...
EUVD-2026-25626
SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...
CVE-2026-41894 SiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint
SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...
CVE-2026-31665
creationtimestamp| type| source ---|---|--- 2026-04-24 18:07:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116461014638911540 2026-04-27 20:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkiuc3bley2w 2026-05-05 20:00:00+00:00| seen|...
CVE-2026-42040 Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode function in lib/helpers/AxiosURLSearchParams.js contains a character mapping charMap at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent'\x00' correctly...
CVE-2026-40976
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e 2026-04-27 05:23:49+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mkhdcsbjs22h 2026-04-28 01:01:21+00:00| seen|...
CVE-2026-40977
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e...
CVE-2026-40970
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e...
CVE-2026-40971
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e 2026-06-12 12:55:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27...
CVE-2026-40538
creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...