112834 matches found
CVE-2026-5184
creationtimestamp| type| source ---|---|--- 2026-03-31 10:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midykaksrx2g...
CVE-2026-5195
creationtimestamp| type| source ---|---|--- 2026-03-31 10:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midxydl6yc2q 2026-03-31 11:17:48+00:00| seen| Telegram/qhrMuORufep18va9eZH1nvqNGmq4wR7ALJzzgA5Ea6S8aY...
CVE-2026-5185
creationtimestamp| type| source ---|---|--- 2026-03-31 10:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midx5i7aqd2d...
EUVD-2025-209137
Reflected Cross-Site Scripting XSS vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or ...
CVE-2025-41356 Reflected Cross-Site Scripting in Anon Proxy Server
Reflected Cross-Site Scripting XSS vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or ...
CVE-2025-41356
Summary: CVE-2025-41356 is a reflected XSS vulnerability in Anon Proxy Server v0.104, impacting the host parameter in the /diagconnect.php endpoint. An attacker can trick a victim into clicking a malicious URL, causing JavaScript execution in the user’s browser and potential data theft (e.g., ses...
CVE-2026-1710
creationtimestamp| type| source ---|---|--- 2026-03-31 07:25:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midnjd3hpi2o...
CVE-2026-4146
creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midmxg2ok625 2026-04-01 16:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mih5b677xn2j...
GHSA-MC26-Q38V-83GV OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance versions = 30.0.0 30.1.1, == 31.0.0 are affected by Server-Side Request Forgery SSRF. By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only the glance image import functionality is affected. In particular, the...
CVE-2026-34881
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery SSRF. By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, th...
CVE-2026-29954
In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources. The field is only URL-encoded without validating the target address. More critically, when kubeconfiggenerator uses wget to...
CVE-2026-30566
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewcustomers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...
CVE-2026-30560
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsupplier.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...
CVE-2026-34571
creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:26+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-fc4p-p49v-r948 2026-04-01 22:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihpqd25v422 2026-04-01 23:28:03+00:00|...
CVE-2026-33985
creationtimestamp| type| source ---|---|--- 2026-03-31 00:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micuudixwt2o...
PT-2026-29303
Name of the Vulnerable Software and Affected Versions Discourse versions 2026.1.0 through 2026.1.2, 2026.2.0 through 2026.2.1, and 2026.3.0 Description The StaticController's enter action does not validate the sso destination url cookie before redirecting to it with allow other host: true. This...
python3.11 security update
3.11.13-5.2.0.1 - Remove upstream URL reference Orabug: 36073032 3.11.13-5.2 - Security fix for CVE-2026-4519 Resolves: RHEL-158050...
python3.12 security update
3.12.12-4.0.1.el97.2 - Remove upstream URL reference 3.12.12-4.2 - Security fix for CVE-2026-4519 Resolves: RHEL-158051 3.12.12-4.1 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143106 RHEL-143168 RHEL-144891...
PT-2026-29210
Reflected Cross-Site Scripting XSS vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or ...