CVE-2026-52840

Affected software: Easy!Appointments (self-hosted) prior to 1.6.0. Vulnerability: Server-Side Request Forgery (SSRF) in the CalDAV connection test. In Caldav::connect_to_server (application/controllers/Caldav.php:60), the request’s caldav_url is handed to a Guzzle REPORT call without proper schem...

AZL-92376 CVE-2026-58478 affecting package sip 4.19.25-13

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

CVE-2026-55040

creationtimestamp| type| source ---|---|--- 2026-07-14 15:03:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116918936175684697 2026-07-14 18:17:37+00:00| seen| https://bsky.app/profile/captechgroup.com/post/3mqmswep6632k 2026-07-14 19:00:53+00:00| seen|...

CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

CVE-2026-58478

SIP 5.2.16 has a server-side request forgery (SSRF) vulnerability when the optional Node-RED plugin is installed. An unauthenticated attacker can supply a malicious callback URL and cause the device to issue arbitrary HTTP requests due to lack of destination validation, aided by the default passp...

CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

CVE-2026-15692

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

EUVD-2026-43667

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

CVE-2026-15692

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

CVE-2026-15692 Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

CVE-2026-54307

creationtimestamp| type| source ---|---|--- 2026-07-14 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqm67u2njg2l...

CVE-2026-59246

creationtimestamp| type| source ---|---|--- 2026-07-14 12:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5vzj3ce24 2026-07-20 05:46:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lqpopwi2z 2026-07-20 05:46:47+00:00| seen|...

CVE-2026-8384

creationtimestamp| type| source ---|---|--- 2026-07-14 11:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5q2hfk72w 2026-07-20 05:39:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ldikcy42i 2026-07-20 05:44:37+00:00| seen|...

Security update for afterburn

This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. CVE-2026-41677: openssl: out-of-bounds read in PEM password...

Improper Handling of URL Encoding (Hex Encoding)

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Handling of URL Encoding Hex Encoding in the RewriteValve. An attacker can bypass security constraints by crafting speciall...

CVE-2026-48978

A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a malicious registry or performing a man-in-the-middle attack, could exploit this to...

Denial-of-service (DoS) vulnerability in the in-app browser of LINE client for iOS

Overview LINE client for iOS provided by LY Corporation contains a vulnerability in the in-app browser due to insufficient safeguards when handling arbitrary URL schemes, which may lead to denial-of-service DoS condition CWE-400, CVE-2026-3861. LY Corporation reported this vulnerability to...

CVE-2026-53539

A flaw was found in Python-Multipart, a streaming multipart parser. A remote attacker can exploit this vulnerability by submitting a specially crafted application/x-www-form-urlencoded body. This can cause the QuerystringParser to perform inefficient processing, leading to excessive CPU...

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...

CVE-2026-11563

creationtimestamp| type| source ---|---|--- 2026-07-14 09:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvi56bjx2l 2026-07-14 13:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnci5jv2r 2026-07-14 18:00:09+00:00| seen|...