112834 matches found
CVE-2026-5045
creationtimestamp| type| source ---|---|--- 2026-03-29 15:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7gfxzig62s 2026-03-29 15:20:39+00:00| seen| Telegram/nb8fCm1TKw7DFYOlnuooYH-uWzxRBf3GinTZz9uDDCr2nY...
CVE-2026-34585
creationtimestamp| type| source ---|---|--- 2026-03-29 14:22:49+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-ff66-236v-p4fg 2026-03-31 23:11:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifceviqjb25 2026-03-31 23:20:56+00:00...
CVE-2026-5042
creationtimestamp| type| source ---|---|--- 2026-03-29 13:15:14+00:00| published-proof-of-concept| Telegram/NO7FZZuUxfHd7B5nuheE0b5oaDsWf9usHusaCtuaPPn3P4 2026-03-30 21:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3micklluohm2f...
EUVD-2026-16961
A vulnerability was detected in Totolink A3600R 4.1.2cu.5182B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument NoticeUrl results in command injection. The attack may be launched...
CVE-2026-33981
changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the jq: and jqraw: include filter expressions allow use of the jq env builtin, which reads all process environment variables and stores them as the watch snapshot. An authenticated user or unauthenticated us...
CVE-2026-5016
A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly availabl...
CVE-2026-5016 elecV2 elecV2P URL mock eAxios server-side request forgery
A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly availabl...
CVE-2026-5016 elecV2 elecV2P URL mock eAxios server-side request forgery
A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly availabl...
CVE-2026-34528
creationtimestamp| type| source ---|---|--- 2026-03-28 19:03:25+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-x8jc-jvqm-pm3f 2026-03-28 19:03:25+00:00| published-proof-of-concept|...
CVE-2026-5000
creationtimestamp| type| source ---|---|--- 2026-03-28 17:09:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi54rxttvh25 2026-03-28 17:15:31+00:00| seen| Telegram/UqVXoPD2ncgjy8FLcvETcR69G7ubUkWuPHFuyVDBoMX-28...
CVE-2026-33766
WWBN AVideo is an open source video platform. In versions up to and including 26.0, isSSRFSafeURL validates URLs against private/reserved IP ranges before fetching, but urlgetcontents follows HTTP redirects without re-validating the redirect target. An attacker can bypass SSRF protection by...
CVE-2026-4984
The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'. When processing media messages, it fetches user-controlled URLs 'MediaUrlN' parameters using HTTP requests that include the integration's Twilio credentials in the 'Authorization'...
penclaw
🦀 PenClaw AI-powered penetration testing CLI. One command...
CVE-2018-25225
creationtimestamp| type| source ---|---|--- 2026-03-28 15:04:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4vrmqnmh2g...
CVE-2018-25223
creationtimestamp| type| source ---|---|--- 2026-03-28 14:54:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4v7przwy24 2026-04-02 20:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijyn2t7oi2w 2026-04-12 04:24:13+00:00| seen|...
CVE-2018-25221
creationtimestamp| type| source ---|---|--- 2026-03-28 14:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4urd76wy2z 2026-04-02 20:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mik2ufvujj2f 2026-04-12 04:22:31+00:00| seen|...
CVE-2016-20047
creationtimestamp| type| source ---|---|--- 2026-03-28 14:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4txkn6zt23...
CVE-2017-20226
creationtimestamp| type| source ---|---|--- 2026-03-28 14:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4tom74yr2g...