112438 matches found
CVE-2026-8233
creationtimestamp| type| source ---|---|--- 2026-05-10 07:53:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlibpxnk5h2e 2026-09-04 14:00:05+00:00| published-proof-of-concept| https://t.me/apsecurity/1030 2026-09-05 01:00:27+00:00| published-proof-of-concept|...
CVE-2026-45373
creationtimestamp| type| source ---|---|--- 2026-05-10 07:52:37+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-88gh-2526-gfrr...
CVE-2026-8225
creationtimestamp| type| source ---|---|--- 2026-05-10 07:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mliake2qlj2q...
CVE-2026-8218
creationtimestamp| type| source ---|---|--- 2026-05-10 04:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhxb4qkct2p 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27...
CVE-2022-50970
creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50970 2026-05-10 15:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3silfkl2o...
CVE-2022-50962
creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50962 2026-05-10 15:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlizllrw432e...
CVE-2026-6735
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...
CVE-2026-6735 XSS within PHP-FPM status endpoint
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...
CVE-2026-45181
creationtimestamp| type| source ---|---|--- 2026-05-10 01:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlqtpypx2t...
CVE-2026-45182
creationtimestamp| type| source ---|---|--- 2026-05-10 01:09:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhl6wvexz2e...
PT-2026-41196
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description The validate url function in backend/open webui/retrieval/web/utils.py only validates the initial URL provided by the user. Downstream HTTP clients, including sync requests, async aiohttp, and...
WordPress plugin IP2Location Country Blocker 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
WordPress plugin Picture Gallery 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-41195
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5 Description A parsing discrepancy between the urlparse and requests libraries allows for a Server-Side Request Forgery SSRF bypass. The validate url function uses urlparse to verify the hostname; however,...
CVE-2026-45345
creationtimestamp| type| source ---|---|--- 2026-05-09 22:10:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp 2026-05-16 01:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwocnrknq2e...
CVE-2026-8194
creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhaua5h5m2i...
CVE-2026-42257
creationtimestamp| type| source ---|---|--- 2026-05-09 21:40:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7iqqghk2r 2026-05-10 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplujde42d 2026-07-18 12:01:11+00:00| seen|...
CVE-2026-8198
creationtimestamp| type| source ---|---|--- 2026-05-09 15:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgjfi7j3n2i 2026-05-10 01:36:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116547714758316244 2026-05-11 01:33:05+00:00| seen|...
CVE-2026-3828
creationtimestamp| type| source ---|---|--- 2026-05-09 10:01:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlfyhby4gg2x 2026-05-09 12:40:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgbby5j6r2p...