CVE-2026-10661 ahujasid blender-mcp server.py open injection

A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blendermcp/server.py. The manipulation of the argument inputimageurl leads to injection. Remote exploitation of the attack is possible. The exploit...

CVE-2026-10661

The CVE concerns ahujasid blender-mcp with a vulnerability in the Open function of src/blender_mcp/server.py. Manipulating the input_image_url parameter leads to injection, with remote exploitation possible. The affected project uses rolling releases, so specific version details are not listed; p...

CVE-2019-25724

creationtimestamp| type| source ---|---|--- 2026-06-02 21:24:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndjrl62c42m...

CVE-2026-41569

authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper URL parsing. An attacker who can craft a login link can supply a wreply value on a different origin...

CVE-2026-10617

creationtimestamp| type| source ---|---|--- 2026-06-02 21:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndiuasktx2d...

CVE-2026-48597

The vulnerability CVE-2026-48597 affects elixir-tesla (Tesla) where Tesla.Adapter.Mint.open_conn/2 converts each outgoing request URL scheme to a BEAM atom using String.to_atom(uri.scheme) without an allow-list. Since BEAM atoms are not garbage-collected, an attacker who can influence the request...

CVE-2026-48597

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-48597 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-48597 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-48597 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

CVE-2026-24237

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6flsf6b2u 2026-07-26 10:07:06+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrk54d2ppw23...

CVE-2026-24221

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6febj5d2q...

CVE-2026-47117

creationtimestamp| type| source ---|---|--- 2026-06-02 17:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd5hwnzk62l 2026-06-02 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbqpkwoj23 2026-08-17 18:00:05+00:00| seen|...

CVE-2026-45553

creationtimestamp| type| source ---|---|--- 2026-06-02 17:39:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd56y2qil2t 2026-06-02 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndbr5fszz2f...

CVE-2026-48861

creationtimestamp| type| source ---|---|--- 2026-06-02 16:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnd2xy373n2o 2026-07-10 00:35:21+00:00| published-proof-of-concept| https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v 2026-07-10 04:12:07+00:00|...

CVE-2026-35447

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-9844

creationtimestamp| type| source ---|---|--- 2026-06-02 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncysm7a7a2b...

CVE-2026-10181

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made...

CVE-2026-9726

creationtimestamp| type| source ---|---|--- 2026-06-02 15:58:23+00:00| seen| https://bsky.app/profile/thedroptimes.bsky.social/post/3mncxkppixd2h 2026-07-11 02:34:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmtyexzp2y...

CVE-2026-39555

creationtimestamp| type| source ---|---|--- 2026-06-02 15:44:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncwrhvdox2z 2026-06-03 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mne4l4jj2r2h...