CVE ID :CVE-2026-63306 Published : July 16, 2026, 1:16 p.m. | 1 hour, 18 minutes ago Description :stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolution filtering or...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63306 - stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints

VERWANDTEARTIKEL

AnyDesk 0-Day Vulnerability Lets Attackers Trigger Denial-of-Service

Legacy Systems, Real-World Impacts: The Reality of OT Security

CVE-2026-5674 - Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

CVE-2026-63305 - AVideo through 29.0 OS Command Injection via ffmpeg.json.php

CVE-2025-71377 - stoatchat before 20250210-1 Unrestricted Message History Fetch

CVE-2026-11386 - ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution