498 matches found
CVE-2026-55469
creationtimestamp| type| source ---|---|--- 2026-07-11 02:12:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdllfoczi2y...
CVE-2026-21046
creationtimestamp| type| source ---|---|--- 2026-07-10 08:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbooizzdg2k 2026-07-10 09:55:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbuyfovei27 2026-07-10 12:46:50+00:00| seen|...
Open Redirect in Apache Superset
Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link...
UBUNTU-CVE-2026-55404
yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpageurl or filename metadata without sufficient validation or escaping,...
CVE-2026-59923
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safeurl does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version...
PT-2026-56539
Name of the Vulnerable Software and Affected Versions PasswordPusher versions prior to 2.8.1 Description Insufficient validation in the valid url function allows the application to accept data URI schemes in URL push payloads. This enables attackers to create malicious pushes containing...
GO-2026-5897 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder
Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent in github.com/coder/coder...
CVE-2019-16728
creationtimestamp| type| source ---|---|--- 2026-07-07 14:02:53+00:00| seen| https://gist.github.com/UltraRamy/b344c7471b63468d9b5bc7bd3f33c59c...
CVE-2026-38076
creationtimestamp| type| source ---|---|--- 2026-07-06 07:51:10+00:00| seen| https://gist.github.com/dkjsone/c237b83ffa9ebd7028b5db7f410fcf78 2026-07-11 00:35:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg5rrfll2w 2026-08-26 06:45:47+00:00| seen|...
CVE-2026-14719
creationtimestamp| type| source ---|---|--- 2026-07-05 12:31:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvlf5y5lu26...
CVE-2026-14650
creationtimestamp| type| source ---|---|--- 2026-07-04 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpub26mrxk2o...
CVE-2026-9107
creationtimestamp| type| source ---|---|--- 2026-07-04 06:15:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpsfvyzdaf2c...
CVE-2026-53231
creationtimestamp| type| source ---|---|--- 2026-07-03 15:56:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvw4jtt72y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...
CVE-2026-56377
creationtimestamp| type| source ---|---|--- 2026-07-03 11:35:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqhdo273z2k...
PT-2026-55491
Name of the Vulnerable Software and Affected Versions ASUS Router App affected versions not specified Description An Improper Export of Android Application Components allows a third-party application installed on the same device to send a crafted Intent, which forces the ASUS Router App to open a...
CVE-2026-50721
creationtimestamp| type| source ---|---|--- 2026-07-02 23:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppa4jizl22w 2026-07-03 02:19:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mppibbebaj2x 2026-07-03 06:24:49+00:00| seen|...
CVE-2026-58024
creationtimestamp| type| source ---|---|--- 2026-07-02 02:45:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzalob7e2y 2026-07-02 04:32:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn77mty652u 2026-07-02 07:00:16+00:00| seen|...
CVE-2025-71352
creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkie7csbt25...
Cisco Webex App input validation vulnerability (CNVD-2026-26204)
The Cisco Webex App is a video conferencing and collaboration software developed by Cisco, Inc. in the United States. The Cisco Webex App has a vulnerability related to input validation. This vulnerability stems from improper input validation of URL parameters in HTTP requests. Attackers can...