112784 matches found
CVE-2026-56078
creationtimestamp| type| source ---|---|--- 2026-04-08 19:21:32+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-766v-q9x3-g744 2026-06-19 01:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom6w2ozwi2r...
CVE-2025-50668
creationtimestamp| type| source ---|---|--- 2026-04-08 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370636293391705...
CVE-2026-33460
creationtimestamp| type| source ---|---|--- 2026-04-08 18:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyxzeweqw2i 2026-04-09 12:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlogbtp2z...
EUVD-2026-20507
A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address URL. This allows the application's backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery SSRF...
EUVD-2024-33448
The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg and removequeryarg without appropriate escaping on the URL in all versions up to, and including, 3.11.7. This makes it possible for unauthenticated...
CVE-2026-39409
creationtimestamp| type| source ---|---|--- 2026-04-08 18:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyw7smrdr22...
CVE-2026-35400 LORIS incorrectly trusts user input in publication module
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
CVE-2026-35400
LORIS (Longitudinal Online Research and Imaging System) is affected from 20.0.0 up to but not including 27.0.3 and 28.0.1 by a publication module flaw that trusts the baseURL submitted via a user’s POST request instead of the internal LORIS value. This could allow an attacker with publication-mod...
CVE-2026-35400 LORIS incorrectly trusts user input in publication module
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
EUVD-2026-20576
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
CVE-2026-35400 LORIS incorrectly trusts user input in publication module
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL submitted by a user's PO...
CVE-2026-4837
creationtimestamp| type| source ---|---|--- 2026-04-08 18:24:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyw3danrk2i 2026-04-13 12:10:45+00:00| seen| https://bsky.app/profile/vitobotta.com/post/3mjetjofdtk2x 2026-04-13 12:10:45+00:00| seen|...
CVE-2026-39406
creationtimestamp| type| source ---|---|--- 2026-04-08 18:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvx6stlw24...
CVE-2026-39408
creationtimestamp| type| source ---|---|--- 2026-04-08 18:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvtdsplx22 2026-04-10 23:26:51+00:00| seen| Telegram/VmPzW9vK7p7Zve81sAsPaRrRR2EIHLwag0ULU7f22817b0...
CVE-2026-5912
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 01:48:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372228765427357 2026-04-09 17:41:59+00:00| seen|...
CVE-2026-2377 Mirror-registry: quay: quay: server-side request forgery via log export functionality
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as...
CVE-2026-2509
creationtimestamp| type| source ---|---|--- 2026-04-08 14:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiurtpk42o 2026-05-04 21:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml2mqksokp2i...
Important: Red Hat Security Advisory: grafana security update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...