CVE-2026-7504: URL Redirection to Untrusted Site

A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentially leading to the exposure of sensitive information within the domain or facilitating further...

CLSA-2025-1756409198 wget: Fix of CVE-2024-38428

CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...

CVE-2018-11328: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances a redirect issued with a URI containing a username and password when the Location: header cannot be used, a lack of escaping the user-info component of the URI could result in an XSS vulnerability...