112787 matches found
CVE-2026-5552
creationtimestamp| type| source ---|---|--- 2026-04-05 12:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqqj5qvbk24...
CVE-2026-5557
creationtimestamp| type| source ---|---|--- 2026-04-05 12:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqqd6o6pl25...
CVE-2026-5559
creationtimestamp| type| source ---|---|--- 2026-04-05 12:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpugsen52d...
CVE-2026-5546
creationtimestamp| type| source ---|---|--- 2026-04-05 08:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqdjamnh72q...
CVE-2026-5535
creationtimestamp| type| source ---|---|--- 2026-04-05 04:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipwxc3pvd27...
CVE-2026-5531
creationtimestamp| type| source ---|---|--- 2026-04-05 04:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipw4gb34z27...
CVE-2026-5538
creationtimestamp| type| source ---|---|--- 2026-04-05 04:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipulrz63i2i...
CVE-2026-5538 QingdaoU OnlineJudge judge_server_heartbeat Endpoint JudgeServer.service_url server-side request forgery
A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1. Affected by this issue is the function serviceurl of the file JudgeServer.serviceurl of the component judgeserverheartbeat Endpoint. The manipulation results in server-side request forgery. It is possible to launch the attack...
CVE-2026-5538
CVE-2026-5538 affects QingdaoU OnlineJudge up to 1.6.1. The issue lies in the function service_url of JudgeServer.service_url within the judge_server_heartbeat Endpoint, where manipulation enables server-side request forgery. The vulnerability is exploitable remotely. The vendor has been contacte...
CVE-2026-34378
creationtimestamp| type| source ---|---|--- 2026-04-05 02:01:11+00:00| seen| https://bsky.app/profile/slackers.it/post/3mipnqdekar2n...
CVE-2026-34589
creationtimestamp| type| source ---|---|--- 2026-04-05 02:01:10+00:00| seen| https://bsky.app/profile/slackers.it/post/3mipnqc75xj2n 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4 2026-04-18 00:01:26+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-31934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime...
CVE-2026-25118
immich is a high performance self-hosted photo and video management solution. Prior to version 2.6.0, the Immich application is vulnerable to credential disclosure when a user authenticates to a shared album. During the authentication process, the application transmits the album password within t...
CVE-2016-20057
creationtimestamp| type| source ---|---|--- 2026-04-04 15:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miok6wq2i52i...
CVE-2026-2826
creationtimestamp| type| source ---|---|--- 2026-04-04 12:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mioalf7ap52i 2026-04-10 23:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj6i3pigaf2b...
CVE-2026-0552
creationtimestamp| type| source ---|---|--- 2026-04-04 08:34:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mintaqwxit2z 2026-04-10 19:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj62ojznyu2m...
GHSA-7GVF-3W72-P2PG pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Summary The fix for CVE-2026-33992 GHSA-m74m-f7cr-432x added IP validation to BaseDownloader.download that checks the hostname of the initial download URL. However, pycurl is configured with FOLLOWLOCATION=1 and MAXREDIRS=10, causing it to automatically follow HTTP redirects. Redirect targets are...
Directus: Open Redirect in Admin 2FA Setup Page
Summary Directus is vulnerable to an Open Redirect via the redirect query parameter on the /admin/tfa-setup page. When an administrator who has not yet configured Two-Factor Authentication 2FA visits a crafted URL, they are presented with the legitimate Directus 2FA setup page. After completing t...