USN-8217-1: follow-redirects vulnerabilities

It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2022-0155 It was discovered that...

CVE-2026-23558

creationtimestamp| type| source ---|---|--- 2026-04-28 12:54:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkkmx3sy7i2s 2026-04-29 01:49:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-citrix-xenserver 2026-04-29 12:45:35+00:00| seen|...

CVE-2026-40980

creationtimestamp| type| source ---|---|--- 2026-04-28 12:18:03+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkkkritijh27...

GHSA-X2QX-6953-8485

creationtimestamp| type| source ---|---|--- 2026-04-28 12:00:29+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mkkjx4rbxg2s...

Server-side Request Forgery (SSRF)

Overview @dadigua/hyperchat is a HyperChat Core - Node.js backend and CLI tool with AI chat, MCP support Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch function in the AI Proxy Middleware component when processing the baseurl argument. An attack...

EUVD-2026-26001

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...

CVE-2026-7234 BrowserOperator browser-operator-core server.js startsWith path traversal

A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/componentserver/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack can be launched remotely. The exploit...

CVE-2026-31629

creationtimestamp| type| source ---|---|--- 2026-04-28 05:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjvsiev3j2n 2026-07-02 05:50:16+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-42208

creationtimestamp| type| source ---|---|--- 2026-04-28 05:12:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjt6gwxzm25 2026-04-28 09:39:14+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mkkc2kw66e2u 2026-04-28 16:43:02+00:00| seen|...

CVE-2026-31627

creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshysxsk2z 2026-07-02 05:50:12+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-31644

creationtimestamp| type| source ---|---|--- 2026-04-28 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjshrf7fs2z 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31638

creationtimestamp| type| source ---|---|--- 2026-04-28 04:28:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqo5aoza2z...

CVE-2026-31637

creationtimestamp| type| source ---|---|--- 2026-04-28 04:27:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjqnvpjxx2f 2026-07-02 05:50:21+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06...

CVE-2026-7221

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

CVE-2026-7221

CVE-2026-7221 affects TencentCloudBase CloudBase-MCP (up to v2.17.0) with a vulnerability in the openUrl function (mcp/src/interactive-server.ts) of the open-url API Endpoint. Manipulating req.body.url enables server-side request forgery (SSRF) and can be exploited remotely; the exploit is public...

CVE-2026-7221 TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

CVE-2026-7221

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

CVE-2026-7221 TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

CVE-2026-7177

creationtimestamp| type| source ---|---|--- 2026-04-28 02:18:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkjjfn2aab23...

CVE-2025-48431

creationtimestamp| type| source ---|---|--- 2026-04-28 01:47:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjhpkotqm2u 2026-04-28 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkktqjzizg2h 2026-07-21 12:49:42+00:00| seen|...