112654 matches found
WWBN AVideo 跨站请求伪造漏洞
WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the objects/configurationUpdate.json.php file, which protected the endpoint through...
PT-2026-41172
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF bypass exists in the validate url function located in backend/open webui/retrieval/web/utils.py. The function calls validators.ipv6ip, private=True, but because...
RockyLinux 10 : delve (RLSA-2026:8842)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8842 advisory. crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-27137 net/url: Incorrect parsing of IPv6 host literals in net/url...
RHEL 9 : git-lfs (RHSA-2026:9436)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9436 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
PT-2026-41173
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF issue exists in the process picture url function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the...
PT-2026-33973
Cross-Site Scripting XSS vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploit...
RockyLinux 10 : go-rpm-macros (RLSA-2026:8840)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:8840 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...
RHEL 9 : git-lfs (RHSA-2026:9439)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9439 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
RHEL 10 : git-lfs (RHSA-2026:9435)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9435 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...
CVE-2026-29648
creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...
CVE-2026-0930
creationtimestamp| type| source ---|---|--- 2026-04-20 22:39:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjwe4hzm2p...
CVE-2026-5450
creationtimestamp| type| source ---|---|--- 2026-04-20 22:26:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj7fnnpm2q 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs 2026-04-28 15:01:17+00:00| seen|...
CVE-2026-4852
creationtimestamp| type| source ---|---|--- 2026-04-20 22:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj2wb56l2i...
CVE-2026-34403
creationtimestamp| type| source ---|---|--- 2026-04-20 22:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiswvnh42r 2026-04-22 19:23:16+00:00| seen| Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHSwnxFgvg...
CVE-2026-32613
creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxgi64hg52n 2026-04-20 22:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjjnzxor2k 2026-04-20 22:58:47+00:00| seen|...
Important: Red Hat Security Advisory: containernetworking-plugins security update
An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
CVE-2026-6662
creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY 2026-04-20 19:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxangjizy2i...