122661 matches found
CVE-2026-13147
The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts Server-Side Request Forgery...
CVE-2026-12606
creationtimestamp| type| source ---|---|--- 2026-07-20 05:19:29+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr2kaioqa522...
PT-2026-67319
Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.14.2 Description The built-in cURL handlers CurlHandler and CurlMultiHandler fail to properly isolate Proxy-Authorization headers from origin servers. This occurs because the handlers place first-class...
PT-2026-61540
The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...
CVE-2026-44583: Server-Side Request Forgery (SSRF)
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the PayPal webhook endpoint /extensions/paypal/webhook processes the PAYPAL-CERT-URL HTTP header without validation, allowing attackers to control server-side HTTP request...
CVE-2026-60033: Server-Side Request Forgery (SSRF)
Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension 1.6.0 - The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses...
CVE-2026-64626: Server-Side Request Forgery (SSRF)
AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...
CVE-2026-57309: Improper Neutralization of Special Elements used in an SQL Command
A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in versi...
CVE-2026-63429: Missing Authentication for Critical Function
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, POST /api/upload has no authentication guard, no global guard, no form-context validation, no openToken requirement, and no session cookie check. Any anonymous internet user can upload files PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, MP...
CVE-2026-2445: Improper Neutralization of Input During Web Page Generation
The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...
TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0671)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0671 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the redirection of URLs to unreliable websites, allowing attackers to circumvent security restrictions.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...
PT-2026-61735
Name of the Vulnerable Software and Affected Versions GRAPHIFY versions 0.3.2 through 0.4.29 Description A remote attacker can execute arbitrary code through the validate url, safe fetch, build opener, fetch html, and download binary functions. Recommendations At the moment, there is no informati...
CVE-2026-32824: URL Redirection to Untrusted Site
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, a low-privileged authenticated API user can supply forwardToUrl and...
MAL-2026-10943 Malicious code in aftermathfi (npm)
The aftermathfi package was published to the npm registry by user 'jet0010001' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign impersonating the Aftermath Finance SDK Aftermath Finance is a DeFi protocol on the Sui blockchain. The package was...
VulnCheck KEV: CVE-2016-4800
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...
CVE-2026-64167
creationtimestamp| type| source ---|---|--- 2026-07-19 18:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzeuwjbfx2g 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-64171
creationtimestamp| type| source ---|---|--- 2026-07-19 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzelkqwie23 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-63896
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GETURL handling The WebUSB GETURL handler in compositesetup narrows landingpagelength to fit the host-supplied wLength using landingpagelength = wlength -...
CVE-2026-63829
creationtimestamp| type| source ---|---|--- 2026-07-19 15:54:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz5abk4l72e 2026-07-20 18:42:43+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3x4rxuus2j 2026-07-20 18:42:45+00:00| seen|...