CVE-2026-12787

creationtimestamp| type| source ---|---|--- 2026-06-21 11:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosctbnql62l...

CVE-2026-12787

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...

EUVD-2026-38151

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...

CVE-2024-8806

creationtimestamp| type| source ---|---|--- 2026-06-21 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mornpcbldq2a...

PT-2026-51258

Name of the Vulnerable Software and Affected Versions kortix-ai suna versions prior to 0.8.39 Description A weakness in the Auth Endpoint component allows for remote cross-site scripting XSS, which is a technique where malicious scripts are injected into trusted websites. The issue exists within...

CVE-2026-56228

creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...

CVE-2026-77111

creationtimestamp| type| source ---|---|--- 2026-06-20 20:32:39+00:00| seen| https://gist.github.com/elbakouchisamira61-bit/5d6b526ef00d36ec0158cd86cca2f16e...

CVE-2026-56330

creationtimestamp| type| source ---|---|--- 2026-06-20 20:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqp2fi5lq22 2026-06-21 13:11:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116788263084343961...

CVE-2026-56342

creationtimestamp| type| source ---|---|--- 2026-06-20 20:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqoozz66m22...

CVE-2026-56304

creationtimestamp| type| source ---|---|--- 2026-06-20 20:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqok5jmtt2f...

CVE-2026-56282

creationtimestamp| type| source ---|---|--- 2026-06-20 20:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqo23tp4i2w...

CVE-2025-71379

creationtimestamp| type| source ---|---|--- 2026-06-20 20:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqnpdswz622...

CVE-2026-56332

creationtimestamp| type| source ---|---|--- 2026-06-20 19:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqn5gwuvf2w...

CVE-2026-56276

creationtimestamp| type| source ---|---|--- 2026-06-20 19:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqmuihsev2i...

CVE-2026-56342

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2026-56342 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL validation and accepts requests to private IP ranges and cloud metadata...

CVE-2019-25763

creationtimestamp| type| source ---|---|--- 2026-06-20 15:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7z4l7zk2b...

CVE-2026-56332 Capgo - Open Redirect via confirmation_url Parameter

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmationurl parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting...

CVE-2026-56227

Capgo before 12.128.2 is affected by a server-side request forgery (SSRF) in webhook URL validation. The flaw permits configuring webhooks to loopback or internal addresses (e.g., localhost/127.0.0.1). When triggered, the backend makes outbound requests to those addresses, and error responses are...

CVE-2026-56227 Capgo - Server-Side Request Forgery via Webhook URL Validation

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configure webhooks pointing to localhost or 127.0.0.1, and when triggered, the backend performs outbound requests to these...