CVE-2026-11403

creationtimestamp| type| source ---|---|--- 2026-07-14 16:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmnoybfes27...

CVE-2026-14645

CVE-2026-14645 : Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the Webhook: Global capability. The product does not validate the destination URL of the configured Webhook: Global before making an outbound HTTP request, enabling a user with the Capability Administratio...

CVE-2025-12011

creationtimestamp| type| source ---|---|--- 2026-07-14 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmmw375fu2t 2026-07-16 16:15:43+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06...

CVE-2026-15694

creationtimestamp| type| source ---|---|--- 2026-07-14 16:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmafbgcm2z 2026-07-22 05:05:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kf73r4c2z...

CVE-2026-52840

Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, Caldav::connecttoserver at application/controllers/Caldav.php:60 hands the request's caldavurl to a Guzzle REPORT call without scheme or host validation. A logged-in backend user admin, provider, or secretary...

CVE-2026-51105

creationtimestamp| type| source ---|---|--- 2026-07-14 15:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkcoi4r42e 2026-07-22 05:03:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kb2qcoe24...

CVE-2026-53410

creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjicwo2y2e 2026-07-14 16:45:10+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-16 14:23:57+00:00| seen|...

CVE-2026-52840

Affected software: Easy!Appointments (self-hosted) prior to 1.6.0. Vulnerability: Server-Side Request Forgery (SSRF) in the CalDAV connection test. In Caldav::connect_to_server (application/controllers/Caldav.php:60), the request’s caldav_url is handed to a Guzzle REPORT call without proper schem...

CVE-2026-55040

creationtimestamp| type| source ---|---|--- 2026-07-14 15:03:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116918936175684697 2026-07-14 18:17:37+00:00| seen| https://bsky.app/profile/captechgroup.com/post/3mqmswep6632k 2026-07-14 19:00:53+00:00| seen|...

CVE-2026-58478

SIP 5.2.16 has a server-side request forgery (SSRF) vulnerability when the optional Node-RED plugin is installed. An unauthenticated attacker can supply a malicious callback URL and cause the device to issue arbitrary HTTP requests due to lack of destination validation, aided by the default passp...

CVE-2026-58478 Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...

CVE-2026-15692

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit ha...

CVE-2026-54307

creationtimestamp| type| source ---|---|--- 2026-07-14 12:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqm67u2njg2l...

CVE-2026-59246

creationtimestamp| type| source ---|---|--- 2026-07-14 12:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5vzj3ce24 2026-07-20 05:46:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lqpopwi2z 2026-07-20 05:46:47+00:00| seen|...

CVE-2026-8384

creationtimestamp| type| source ---|---|--- 2026-07-14 11:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5q2hfk72w 2026-07-20 05:39:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ldikcy42i 2026-07-20 05:44:37+00:00| seen|...

Security update for afterburn

This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. CVE-2026-41677: openssl: out-of-bounds read in PEM password...

CVE-2026-48978

A flaw was found in oras-go. The auth.Client in oras-go does not properly validate the scheme or host of the realm URL provided in a registry's WWW-Authenticate: Bearer challenge. A remote attacker, operating a malicious registry or performing a man-in-the-middle attack, could exploit this to...

CVE-2026-53539

A flaw was found in Python-Multipart, a streaming multipart parser. A remote attacker can exploit this vulnerability by submitting a specially crafted application/x-www-form-urlencoded body. This can cause the QuerystringParser to perform inefficient processing, leading to excessive CPU...

CVE-2026-12482

creationtimestamp| type| source ---|---|--- 2026-07-14 09:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvtibkts2t 2026-07-19 21:10:12+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqzovlwxzm23 2026-07-19 21:10:19+00:00| seen|...

CVE-2026-11563

creationtimestamp| type| source ---|---|--- 2026-07-14 09:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvi56bjx2l 2026-07-14 13:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnci5jv2r 2026-07-14 18:00:09+00:00| seen|...