112786 matches found
CVE-2025-61166
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...
PT-2026-30629
Name of the Vulnerable Software and Affected Versions Homarr versions prior to 1.57.0 Description Homarr is an open-source dashboard. A DOM-based Cross-Site Scripting XSS issue exists in the /auth/login page. The application improperly trusts the callbackUrl URL parameter, which is used in redire...
whisperX REST API 代码问题漏洞
WhisperX REST API is an audio transcription and analysis enhancement tool developed by Pavel Zbornik. Versions of the WhisperX REST API from 0.3.1 to 0.5.0 have code vulnerabilities. These vulnerabilities stem from the FileService.downloadfromurl function, which performs a file extension check...
PT-2026-30626
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, a reflected DOM-based XSS vulnerability in taillog.js allows an unauthenticated attacker to inject arbitrary HTML into the Pi-hole admin interface...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1)
The version of AOS installed on the remote host is prior to 7.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library...
PT-2026-30515
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to...
PT-2026-30739
Name of the Vulnerable Software and Affected Versions Open edX Platform affected versions not specified Description The Open edX Platform allows for the creation and delivery of online learning content. The view survey API endpoint is susceptible to an open redirect issue due to the lack of...
CVE-2019-25694
creationtimestamp| type| source ---|---|--- 2026-04-05 23:27:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvn3owoy2j...
CVE-2026-5602
creationtimestamp| type| source ---|---|--- 2026-04-05 23:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvbfbw2k2t...
CVE-2019-25676
CVE-2019-25676 affects Ask Expert Script 3.0.5. The supplied documents describe two vulnerabilities: reflected cross-site scripting (XSS) and SQL injection (SQLi). The XSS and SQLi can be triggered by manipulating URL parameters, specifically the cateid parameter in categorysearch.php and the vie...
CVE-2019-25676 Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection
Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters. Attackers can inject script tags through the cateid parameter in categorysearch.php or SQL code through the view...
CVE-2026-5583
creationtimestamp| type| source ---|---|--- 2026-04-05 19:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miriiodh7a2i...
CVE-2026-5577
creationtimestamp| type| source ---|---|--- 2026-04-05 17:15:47+00:00| published-proof-of-concept| Telegram/gzCKNObz4im4uV-yc9tEdz-C82sp4ablGsaOO-Gqtulpb0 2026-04-05 18:33:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mirf7byob52k 2026-04-05 20:05:50+00:00| seen|...
CVE-2026-5575
creationtimestamp| type| source ---|---|--- 2026-04-05 17:15:47+00:00| published-proof-of-concept| Telegram/gzCKNObz4im4uV-yc9tEdz-C82sp4ablGsaOO-Gqtulpb0 2026-04-05 19:55:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirjrwckfh23...
CVE-2026-5614
creationtimestamp| type| source ---|---|--- 2026-04-05 16:51:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116353129908955135 2026-04-06 04:17:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3misftdrazw2h 2026-04-06 04:30:29+00:00| seen|...
CVE-2026-5570
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:35+00:00| seen| Telegram/7EZO6yhCIMqYJfBNGaO8VjKwhZAHMlzxZRR3j7i1KoVDm38 2026-04-05 16:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir542o4kp2o...
CVE-2026-5565
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:26:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mir2qih75y2y 2026-04-05 16:13:08+00:00| seen|...
CVE-2026-5562
creationtimestamp| type| source ---|---|--- 2026-04-05 12:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqsecleom2j 2026-04-05 13:15:30+00:00| published-proof-of-concept| Telegram/YoTTVTi9Zv4k-o9HEVMgDeJ9GD4yUztoWynI9KgYScEME 2026-07-13 22:00:17+00:00| seen|...