111967 matches found
CVE-2026-6678
creationtimestamp| type| source ---|---|--- 2026-07-01 16:00:12+00:00| seen| https://infosec.place/objects/cf6e553c-bb60-4c89-9f17-6f2b54a2754a...
CVE-2026-58028
creationtimestamp| type| source ---|---|--- 2026-07-01 15:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplurpetfu26 2026-07-02 02:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzkujtyx27 2026-07-02 04:35:02+00:00| seen|...
CVE-2026-34993
creationtimestamp| type| source ---|---|--- 2026-07-01 15:13:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplslnu2cj2t 2026-07-03 00:08:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaxkjiaf2c...
EUVD-2026-41032
Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...
CVE-2026-13706 UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG
Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...
CVE-2026-13706 UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG
Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...
CVE-2026-13706
The CVE-2026-13706 entry concerns Wikimedia Foundation UrlShortener with an improper input validation issue in the UrlShortenerUtils.Php component. According to the NVD entry, the flaw yields a HIGH-severity impact across confidentiality, integrity, and availability (C:H/I:H/A:H) with network att...
Uncaught Exception
Overview @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Uncaught Exception in the URL normalization process when handling malformed percent-encoded sequences in incoming request paths. An attacker can cause the Node.js process to terminate...
CVE-2026-13603
CVE-2026-13603 affects the pretix-oppwa payment integration. The vulnerability arises from insecure handling of Oppwa’s API URL: the code concatenated resourcePath from the return URL to baseUrl without validation and without a trailing slash, enabling an attacker to redirect the API call to a di...
CVE-2026-13603 SSRF with API key leak in pretix-oppwa
The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based on Oppwa's technology. The integration of Oppwa, following their official documentation, includes a step where the user is redirected from the payment provider back to o...
CVE-2026-12113
creationtimestamp| type| source ---|---|--- 2026-07-01 12:47:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkfu34ao23...
CVE-2026-20457
creationtimestamp| type| source ---|---|--- 2026-07-01 12:40:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk23bz3w23 2026-07-02 06:21:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfc7ovxy2i 2026-07-07 16:45:07+00:00| seen|...
CVE-2026-1239
creationtimestamp| type| source ---|---|--- 2026-07-01 12:11:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplig3lr5o27...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
CVE-2026-13454
creationtimestamp| type| source ---|---|--- 2026-07-01 10:51:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpldwfzwlj2q 2026-07-01 11:40:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgoh6jhd2h 2026-07-01 12:39:40+00:00| seen|...
CVE-2026-11562
creationtimestamp| type| source ---|---|--- 2026-07-01 09:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplau54uab2k...
CVE-2026-13821
creationtimestamp| type| source ---|---|--- 2026-07-01 05:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843094682918653 2026-07-01 19:39:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbgibvhs2y 2026-07-02 01:05:22+00:00| seen|...
CVE-2026-13798
creationtimestamp| type| source ---|---|--- 2026-07-01 05:09:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842990988360734 2026-07-02 07:18:59+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:15:10+00:00| seen|...
GHSA-M63V-2G9W-2W6V
creationtimestamp| type| source ---|---|--- 2026-07-01 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842484590156234 2026-07-01 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkjmgapbr23...