CVE-2026-54215

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for...

CVE-2026-12071

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” representing a dot, an attacker can manipulate the portion of the URL following the...

CVE-2026-12071 TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” representing a dot, an attacker can manipulate the portion of the URL following the...

CVE-2026-12071 TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” representing a dot, an attacker can manipulate the portion of the URL following the...

EUVD-2026-54430

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” representing a dot, an attacker can manipulate the portion of the URL following the...

CVE-2026-67870

creationtimestamp| type| source ---|---|--- 2026-08-07 09:28:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msiajk3pqy2o...

CVE-2026-71497

creationtimestamp| type| source ---|---|--- 2026-08-07 08:33:25+00:00| seen| https://gist.github.com/alon710/b4340b7774927252fafb9cfdb5e51a49...

Security Bulletin:Vulnerability in pip affects IBM Netezza Appliance

Summary The pip package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2023-5752 Vulnerability Details CVEID:CVE-2023-5752 DESCRIPTION: When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified...

CVE-2026-15032

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

CVE-2026-16633

creationtimestamp| type| source ---|---|--- 2026-08-07 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117052697803115128 2026-08-07 07:37:49+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...

CVE-2026-15032

The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected...

GHSA-J4R3-HG7J-8CHG

creationtimestamp| type| source ---|---|--- 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...

CVE-2026-45204

creationtimestamp| type| source ---|---|--- 2026-08-07 04:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itsamjl4gbagk...

CVE-2026-19189

creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...

CVE-2026-5391

creationtimestamp| type| source ---|---|--- 2026-08-07 03:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u...

CVE-2026-19149

creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...

CVE-2026-64638

creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...

[SECURITY] Fedora 43 Update: curl-8.15.0-8.fc43

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-56161

creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...

CVE-2026-50481

creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...