phpMyFAQ has stored XSS via Utils::parseUrl() in comment rendering

Summary A stored XSS vulnerability in the comment rendering pipeline allows an authenticated user to inject JavaScript that executes for every visitor of an affected FAQ or News page. An attacker with a registered account can steal admin session cookies and take over the application. Details...

Improper Encoding or Escaping of Output

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the Utils::parseUrl function during comment rendering. An attacker can execute arbitrary JavaScript in the...

CVE-2026-44117

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by sending crafted image URLs to uploadC2CMedia and uploadGroupMedia endpoints to relay unintended requests...

CVE-2026-44116 OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation

OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can bypass SSRF protection by providing malicious photo URLs to the Zalo Bot API, enabling unauthoriz...

CVE-2026-43576 OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL

OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted second-hop targets. The webSocketDebuggerUrl response field is not properly validated, enabling attackers to redirect connections t...

GHSA-9G2Q-W3W2-VF7Q

creationtimestamp| type| source ---|---|--- 2026-05-06 19:40:28+00:00| seen| https://gist.github.com/alon710/30aa8db3db1787262bc908c85e9c7fec...

CVE-2026-20035

creationtimestamp| type| source ---|---|--- 2026-05-06 19:31:15+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml7guk2ryo2v 2026-05-07 00:53:19+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24 2026-05-07 14:40:13+00:00| seen|...

CVE-2025-31984

creationtimestamp| type| source ---|---|--- 2026-05-06 18:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7d5nyctn2r...

NPM: dssrf: every IPv6 category bypasses is_url_safe

NPM: dssrf: every IPv6 category bypasses isurlsafe vulnerability discovered by ? in WordPress Npm dssrf versions 1.3.0...

Incomplete Filtering of Special Elements

Overview dssrf is a SSRF defense library for Node.js with safe URL validation utilities. Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements via the isurlsafe function. An attacker can access internal network resources by supplying specially crafted IPv6...

CVE-2025-31976

creationtimestamp| type| source ---|---|--- 2026-05-06 17:58:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7bo6pcnu2p...

CVE-2025-52613

creationtimestamp| type| source ---|---|--- 2026-05-06 17:47:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7b3b43772i...

CVE-2025-31959

creationtimestamp| type| source ---|---|--- 2026-05-06 17:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aelzoe42h...

CVE-2026-43278

creationtimestamp| type| source ---|---|--- 2026-05-06 17:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528795236956577 2026-05-07 11:52:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116533148086350826 2026-07-02 06:18:13+00:00| seen|...

GHSA-Q4W7-56HR-83RM

creationtimestamp| type| source ---|---|--- 2026-05-06 17:10:29+00:00| seen| https://gist.github.com/alon710/8f2a8c09229ab2a61f27e4872d065fac...

CVE-2026-43273

creationtimestamp| type| source ---|---|--- 2026-05-06 14:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6vr2jybz2e 2026-07-02 06:18:07+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:57+00:00| seen...

CVE-2026-43275

creationtimestamp| type| source ---|---|--- 2026-05-06 14:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uqtt57u2p 2026-07-02 06:18:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:59+00:00| seen...

CVE-2026-43266

creationtimestamp| type| source ---|---|--- 2026-05-06 14:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ufxscao2t 2026-07-02 06:17:56+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:52:36+00:00| seen...

CVE-2026-44985

creationtimestamp| type| source ---|---|--- 2026-05-06 12:29:00+00:00| published-proof-of-concept| https://github.com/amir20/dozzle/security/advisories/GHSA-j643-x8pv-8m67 2026-05-27 01:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd3b27g32n 2026-06-22 00:32:33+00:00| see...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...