Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the imageurl parameter in the chat completions endpoint. An attacker can access internal services and cloud metadata endpoints by supplying a crafted URL that redirects to internal addresses, as...

PT-2026-63509

Name of the Vulnerable Software and Affected Versions Joomla Extension - regularlabs.com - IP login extension affected versions not specified Description The IP login extension generates persistent URL login keys using a non-cryptographic random generator with insufficient entropy, which can lead...

CVE-2026-8152: URL Redirection to Untrusted Site

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting XSS attack. When Unblu Spark is deployed with com.unblu.identifier.siteEmbeddedSetup=true, it runs in the same origin as the host application. Any JavaScript injected through this...

PT-2026-71310

Name of the Vulnerable Software and Affected Versions JupyterLab versions prior to 4.5.10 JupyterLab versions prior to 4.6.2 Description The ImageViewer component in packages/imageviewer/src/widget.ts uses URL.createObjectURL for specially crafted SVG images and revokes the blob URL prematurely...

PT-2026-63350

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open without scheme validation. An attacker with workflow creation/editing privileges can cra...

CVE-2026-64798: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy...

CVE-2026-60300

creationtimestamp| type| source ---|---|--- 2026-07-21 23:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yykq2jd2v 2026-07-23 16:51:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 14:37:06+00:00| seen|...

CVE-2026-60298

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yuxnwyy2j 2026-07-23 16:51:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60292

creationtimestamp| type| source ---|---|--- 2026-07-21 23:48:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynsyrfe2v 2026-07-23 16:50:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 17:07:07+00:00| seen|...

CVE-2026-60288

creationtimestamp| type| source ---|---|--- 2026-07-21 23:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ygnmrgp24 2026-07-23 16:50:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 16:07:06+00:00| seen|...

CVE-2026-60286

creationtimestamp| type| source ---|---|--- 2026-07-21 23:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yd2yztu2r 2026-07-23 16:50:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 15:07:06+00:00| seen|...

CVE-2026-60279

creationtimestamp| type| source ---|---|--- 2026-07-21 23:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6y7gvv2h2v 2026-07-23 16:50:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60272

creationtimestamp| type| source ---|---|--- 2026-07-21 23:34:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xurqovh24 2026-07-23 16:50:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 08:37:06+00:00| seen|...

CVE-2026-60269

creationtimestamp| type| source ---|---|--- 2026-07-21 23:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xuqd6w42a 2026-07-23 16:50:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60264

creationtimestamp| type| source ---|---|--- 2026-07-21 23:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k 2026-07-23 16:50:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 10:37:07+00:00| seen|...

CVE-2026-60258

creationtimestamp| type| source ---|---|--- 2026-07-21 23:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xjzmfxy2y 2026-07-23 16:49:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 11:07:07+00:00| seen|...

CVE-2026-60249

creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 23:07:07+00:00| seen|...

CVE-2026-10680

creationtimestamp| type| source ---|---|--- 2026-07-21 23:15:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6wt5uxig2e...

CVE-2026-60239

creationtimestamp| type| source ---|---|--- 2026-07-21 23:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wqz5oek2u 2026-07-23 16:49:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 12:37:07+00:00| seen|...

CVE-2026-60209

creationtimestamp| type| source ---|---|--- 2026-07-21 23:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wga6kjz2v 2026-07-23 16:48:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 06:07:07+00:00| seen|...