112650 matches found
PT-2026-41173
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF issue exists in the process picture url function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the...
PT-2026-33973
Cross-Site Scripting XSS vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploit...
RockyLinux 10 : go-rpm-macros (RLSA-2026:8840)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:8840 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...
RHEL 10 : git-lfs (RHSA-2026:9435)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9435 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...
RHEL 9 : git-lfs (RHSA-2026:9439)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9439 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
CVE-2026-29648
creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...
CVE-2026-0930
creationtimestamp| type| source ---|---|--- 2026-04-20 22:39:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjwe4hzm2p...
CVE-2026-5450
creationtimestamp| type| source ---|---|--- 2026-04-20 22:26:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj7fnnpm2q 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs 2026-04-28 15:01:17+00:00| seen|...
CVE-2026-4852
creationtimestamp| type| source ---|---|--- 2026-04-20 22:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj2wb56l2i...
CVE-2026-34403
creationtimestamp| type| source ---|---|--- 2026-04-20 22:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiswvnh42r 2026-04-22 19:23:16+00:00| seen| Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHSwnxFgvg...
CVE-2026-32613
creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxgi64hg52n 2026-04-20 22:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjjnzxor2k 2026-04-20 22:58:47+00:00| seen|...
Important: Red Hat Security Advisory: containernetworking-plugins security update
An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
CVE-2026-6662
creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY 2026-04-20 19:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxangjizy2i...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...