122593 matches found
CVE-2026-63313 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch
9Router before 0.4.72 contains a server-side request forgery SSRF vulnerability in the /v1/web/fetch endpoint. The endpoint accepts a user-controlled url parameter and passes it to a configured external scraping provider Firecrawl, Jina Reader, Tavily, or Exa to fetch content. The URL is only...
CVE-2026-61170
creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:42+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mry6eybgyc2e...
CVE-2026-63765 Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant account. Attackers can exploit missing authentication checks to resolve any account and conversation,...
CVE-2026-61072
creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflyia4e32e...
CVE-2026-60918
creationtimestamp| type| source ---|---|--- 2026-07-23 17:49:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60778
creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60676
creationtimestamp| type| source ---|---|--- 2026-07-23 17:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60402
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfy2pkj7b2r...
CVE-2026-65906
creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j 2026-08-18 15:50:05+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624...
CVE-2026-61184
creationtimestamp| type| source ---|---|--- 2026-07-23 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcku3brp24 2026-07-23 18:17:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 23:07:06+00:00| seen|...
CVE-2026-65697 Fathom Lite 1.3.1 Stored XSS via /collect Endpoint
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-65697
Fathom Lite (v1.3.1) has a stored XSS in the analytics collection endpoint (/collect). An unauthenticated user can supply crafted hostname and pathname to inject a javascript: URI, since parseHostname/parsePathname perform no URI scheme validation. The payload is stored and later rendered as an a...
EUVD-2026-48311
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-48534
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...
NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
NPM: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.11...
Directory Traversal
Overview postcss is a PostCSS is a tool for transforming styles with JS plugins. Affected versions of this package are vulnerable to Directory Traversal via the process function. An attacker can access arbitrary files and obtain the first 10 bytes of their contents by supplying a crafted...
CVE-2026-65687
creationtimestamp| type| source ---|---|--- 2026-07-23 15:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd472v7uj2j 2026-07-23 17:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvfs6bk2m 2026-07-29 22:37:06+00:00| seen|...
CVE-2026-64813
creationtimestamp| type| source ---|---|--- 2026-07-23 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd3xvfemu2e 2026-07-29 03:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqx232sos2y...
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
Summary The domain whitelist introduced in PhpSpreadsheet 5.4.0 for the WEBSERVICE formula function can be bypassed via HTTP redirect. The whitelist validates only the initial URL's hostname, but filegetcontents follows 302/301 redirects by default without re-validating the redirect target agains...