112738 matches found
CVE-2026-6490
creationtimestamp| type| source ---|---|--- 2026-04-17 14:03:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp3prdfks2t 2026-04-17 15:15:54+00:00| seen| Telegram/QdqC7jGSCv0UhvQQIZV0fKZEeaKKm-4Qa3u49kJ3A7UaYRQ...
OESA-2026-1977 golang security update
. Security Fixes: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.CVE-2026-25679 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the valu...
OESA-2026-1978 golang security update
. Security Fixes: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which...
CVE-2026-23779
creationtimestamp| type| source ---|---|--- 2026-04-17 10:45:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoqmfwsst2r...
CVE-2026-23778
creationtimestamp| type| source ---|---|--- 2026-04-17 10:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoqdhifmh2s 2026-04-17 11:17:26+00:00| seen| Telegram/Gicxpbsei5vwZhhkOJEP5kItUnFZEzNYMMsg3c4t0xeHr7Q 2026-04-17 11:17:38+00:00| seen|...
CVE-2025-15622
creationtimestamp| type| source ---|---|--- 2026-04-17 10:11:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoopeyoc52r...
CVE-2026-4659
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insufficient path traversal sanitization in the URLtoRelative and urlToPath functions, combined with the...
CVE-2026-6080
creationtimestamp| type| source ---|---|--- 2026-04-17 07:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjodzuvmyi2f 2026-04-17 16:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjpdyoz3s726...
CVE-2026-40458
creationtimestamp| type| source ---|---|--- 2026-04-17 06:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40458 2026-04-17 14:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp67hbtyc2s 2026-04-17 15:15:54+00:00| seen|...
CVE-2026-4659
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insufficient path traversal sanitization in the URLtoRelative and urlToPath functions, combined with the...
CVE-2026-5162
creationtimestamp| type| source ---|---|--- 2026-04-17 06:30:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjocfdxviq2f 2026-04-17 14:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjp5c52pil27...
GHSA-XQ3M-2V4X-88GG
creationtimestamp| type| source ---|---|--- 2026-04-17 04:00:00+00:00| published-proof-of-concept| https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg 2026-04-17 04:00:00+00:00| confirmed|...
CVE-2026-5427
CVE-2026-5427 concerns the Kubio AI Page Builder WordPress plugin (
CVE-2024-58343
creationtimestamp| type| source ---|---|--- 2026-04-17 00:36:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnolmlybi2p...
USN-8182-1: Rack vulnerabilities
Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could possibly use this issue to bypass network security filters. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10. CVE-2026-26961 William T. Nelson...
CVE-2026-40255
creationtimestamp| type| source ---|---|--- 2026-04-17 00:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnnij7teu2f...
SUSE SLES15: libpython3_10-1_0 / libpython3_10-1_0-32bit / python310 / etc (SUSE-SU-2026:1376-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1376-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to...
PT-2026-33461
Name of the Vulnerable Software and Affected Versions prasathmani TinyFileManager versions prior to 2.7 Description An issue in the File Upload Handler component allows for server-side request forgery, a flaw where an attacker can induce the server to make requests to an unintended location. This...
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)
Summary Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward slashes / for special schemes, a payload such as /\evil.com/path slips through isrelativeurl, is emitted unchanged in t...
GHSA-F3G8-9XV5-77GV Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)
Summary Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward slashes / for special schemes, a payload such as /\evil.com/path slips through isrelativeurl, is emitted unchanged in t...