Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:51:35 +0000 CVE-2026-41513 — Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints https://cve.radiocsirt.org/vuln/cve-2026-41513 <p><strong>Affected:</strong> horilla-hr</p> <p>Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted application links into phishing or social-engineering redirects.</p> <p><strong>Affected:</strong> horilla-hr</p> <p>Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted application links into phishing or social-engineering redirects.</p> https://cve.radiocsirt.org/vuln/cve-2026-41513