Archive
15 September 2026
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 5.9CVE-2026-69212 Public exploit
Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-author…
-
Medium 6.1CVE-2026-51133 Public exploit
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to …