112846 matches found
CVE-2026-32871 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...
CVE-2026-32871
FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...
CVE-2026-5331
creationtimestamp| type| source ---|---|--- 2026-04-02 14:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijhcwgtql27...
CVE-2026-23414
creationtimestamp| type| source ---|---|--- 2026-04-02 14:26:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijfxgcajc23 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-07-28 16:47:33+00:00| seen...
CVE-2026-31934
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-31934 Suricata smtp/mine: quadratic complexity in extracting urls
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-31934 Suricata smtp/mine: quadratic complexity in extracting urls
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-31934
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-31934
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-31934 Suricata smtp/mine: quadratic complexity in extracting urls
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4...
CVE-2026-26927
Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched. In Szafir SDK Web it is possible to change the URL HTTP Origin of the application call location. An unauthenticated attacker can craft a website that is able to launch...
CVE-2026-26927 URL (HTTP Origin) call location spoofing in Szafir SDK Web
Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched. In Szafir SDK Web it is possible to change the URL HTTP Origin of the application call location. An unauthenticated attacker can craft a website that is able to launch...
CVE-2026-26927 URL (HTTP Origin) call location spoofing in Szafir SDK Web
Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched. In Szafir SDK Web it is possible to change the URL HTTP Origin of the application call location. An unauthenticated attacker can craft a website that is able to launch...
CVE-2026-23415
creationtimestamp| type| source ---|---|--- 2026-04-02 13:01:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116335238494662786 2026-04-02 14:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijf3yjfqh2s 2026-04-24 17:19:23+00:00| published-proof-of-concept|...
CVE-2026-35394
creationtimestamp| type| source ---|---|--- 2026-04-02 11:04:41+00:00| published-proof-of-concept| https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-5qhv-x9j4-c3vm 2026-04-06 23:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuexqa2cz25 2026-04-06...
CVE-2026-29138
creationtimestamp| type| source ---|---|--- 2026-04-02 10:16:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixytt5ys2d 2026-04-16 21:19:51+00:00| seen| Telegram/3Rneua8sJN4acwbkH9WJwYA0S4fbpKs2cDcX7PKNKVaNXM 2026-04-16 21:19:58+00:00| published-proof-of-concept|...
CVE-2026-29134
creationtimestamp| type| source ---|---|--- 2026-04-02 10:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixupggzk2i 2026-04-16 21:19:51+00:00| seen| Telegram/3Rneua8sJN4acwbkH9WJwYA0S4fbpKs2cDcX7PKNKVaNXM...
CVE-2026-29140
creationtimestamp| type| source ---|---|--- 2026-04-02 10:11:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixquho7j2g 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI...
CVE-2026-0634
creationtimestamp| type| source ---|---|--- 2026-04-02 10:09:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixnbofrg2d 2026-04-02 15:20:57+00:00| seen| Telegram/1FZmwvj65iY9NiI7VGWCBujhZKTilfhPPvdqi0EqVANQnis...
CVE-2026-0686
creationtimestamp| type| source ---|---|--- 2026-04-02 09:15:50+00:00| seen| Telegram/mGlLp0izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA 2026-04-02 10:00:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3miix3yef632n 2026-04-08 14:30:08+00:00| seen|...