112839 matches found
CVE-2026-5635
creationtimestamp| type| source ---|---|--- 2026-04-06 10:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit3npwoam2n...
BIT-NODE-MIN-2026-21712
A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...
BIT-NODE-2026-21712
A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...
CVE-2026-5621
creationtimestamp| type| source ---|---|--- 2026-04-06 06:53:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misokpgmin2i...
CVE-2026-5624
creationtimestamp| type| source ---|---|--- 2026-04-06 06:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mislqrohu423...
CVE-2026-5606
creationtimestamp| type| source ---|---|--- 2026-04-06 03:45:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mise2iigim2d...
CVE-2026-5607
creationtimestamp| type| source ---|---|--- 2026-04-06 03:37:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misdm42lqm2j...
vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system OS command injection vulnerability exists in the netrw standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the scp://...
EUVD-2026-19144
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to...
CVE-2019-25700
creationtimestamp| type| source ---|---|--- 2026-04-06 00:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirymcy5hm2g 2026-04-07 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwqkcbxzr2c...
CVE-2026-5607 imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to...
CVE-2026-5607
CVE-2026-5607 affects imprvhub mcp-browser-agent up to 0.8.0. The vulnerability resides in URL Parameter Handler’s CallToolRequestSchema within src/handlers.ts where manipulating request.params.name/request.params.arguments enables server-side request forgery. Public exploit disclosure and remote...
CVE-2026-5596
creationtimestamp| type| source ---|---|--- 2026-04-06 00:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirxrhp4vo2q...
CVE-2025-61166
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...
Mobile Next 安全漏洞
Mobile Next is an open-source mobile application automation development and testing tool developed by Mobile Next. Versions of Mobile Next prior to 0.0.50 contained security vulnerabilities. These vulnerabilities stemmed from the mobileopenurl tool not verifying the URL schemes provided by users,...
whisperX REST API 代码问题漏洞
WhisperX REST API is an audio transcription and analysis enhancement tool developed by Pavel Zbornik. Versions of the WhisperX REST API from 0.3.1 to 0.5.0 have code vulnerabilities. These vulnerabilities stem from the FileService.downloadfromurl function, which performs a file extension check...
PT-2026-30629
Name of the Vulnerable Software and Affected Versions Homarr versions prior to 1.57.0 Description Homarr is an open-source dashboard. A DOM-based Cross-Site Scripting XSS issue exists in the /auth/login page. The application improperly trusts the callbackUrl URL parameter, which is used in redire...
PT-2026-30626
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, a reflected DOM-based XSS vulnerability in taillog.js allows an unauthenticated attacker to inject arbitrary HTML into the Pi-hole admin interface...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1)
The version of AOS installed on the remote host is prior to 7.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library...
PT-2026-30515
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to...