111971 matches found
CVE-2026-11720 Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder
A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the...
CVE-2026-11720
The CVE-2026-11720 entry describes a path traversal flaw in the HTTP tool URL builder of googleapis/mcp-toolbox. User-controlled pathParams are substituted into a configured tool path and then parsed as a relative URL; while scheme/host/user info are checked, final resolution uses ResolveReferenc...
CVE-2026-20189
creationtimestamp| type| source ---|---|--- 2026-06-29 17:31:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzeqel3e2w...
EUVD-2026-40140
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...
CVE-2026-56285
Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbitrary URLs. Attackers can retrieve HTTP responses from any host reachable by the server, including...
CVE-2026-13750
creationtimestamp| type| source ---|---|--- 2026-06-29 17:09:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgy5hy76j23 2026-06-29 17:54:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2mpvmvb2b 2026-06-29 20:30:47+00:00| seen|...
CVE-2026-57334
creationtimestamp| type| source ---|---|--- 2026-06-29 16:57:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxhwfjod25 2026-06-29 20:40:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphdweu6zk2k 2026-07-31 16:44:08+00:00| seen|...
CVE-2026-13581
creationtimestamp| type| source ---|---|--- 2026-06-29 16:49:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwzn4izb2n...
CVE-2026-57335
creationtimestamp| type| source ---|---|--- 2026-06-29 16:14:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguzz4v2k2e 2026-06-29 20:41:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphdxpoe662d...
EUVD-2026-40147
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. B...
CVE-2026-13751 Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. B...
CVE-2026-13751
Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remote URLs that were retrieved at runtime without sufficient restriction on the request destination. B...
CVE-2026-57332
creationtimestamp| type| source ---|---|--- 2026-06-29 16:12:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguwksenn2o 2026-06-30 12:01:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpixfas4ye2l...
CVE-2026-40698
creationtimestamp| type| source ---|---|--- 2026-06-29 16:01:27+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgud3ksts2c...
CVE-2026-13579
creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgu7avgnr2h 2026-06-29 20:16:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphckz7z5z2n...
CVE-2026-13569
creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...
CVE-2026-40523
creationtimestamp| type| source ---|---|--- 2026-06-29 15:48:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtljlyct2w 2026-06-29 15:48:20+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtlnmwpj2t 2026-06-29 15:53:17+00:00| seen|...
CVE-2026-13565
creationtimestamp| type| source ---|---|--- 2026-06-29 15:47:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtkuxvea2y 2026-06-29 20:11:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphccouli22t...
CVE-2026-12616
creationtimestamp| type| source ---|---|--- 2026-06-29 15:46:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtikxny22t 2026-06-29 21:13:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfq7msmg2d...