Ddgtlmoon

Products

Exploited and recent CVEs

• CVE-2026-95657 Low 3.5 dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting 0.4%
• CVE-2026-95656 High 7.3 dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery 0.5%
• CVE-2026-95273 Medium 4.3 dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal 0.5%
• CVE-2026-95272 Low 3.7 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal 0.7%
• CVE-2026-95271 High 7.3 dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication 0.7%
• CVE-2026-95270 Low 3.7 dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy 0.4%
• CVE-2026-92815 High 7.5 changedetection.io through 0.60.6 SSRF via browser-step Goto URL 0.5%
• CVE-2026-92814 Medium 4.2 changedetection.io through 0.60.6 Cross-Site Scripting via watch_title 0.3%
• CVE-2026-71205 Medium 6.5 changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force 0.3%
• CVE-2026-71204 Medium 6.3 changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement 0.3%
• CVE-2026-71203 Medium 5.3 changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema 0.3%
• CVE-2026-43891 High 7.5 changedetection.io: Arbitrary Local File Read via crafted backup restore 0.4%
• CVE-2026-41895 High 8.2 changedetection.io: XXE vulnerability in the changedetection.io project 0.3%
• CVE-2026-35490 Critical 9.8 changedetection.io has an Authentication Bypass via Decorator Ordering 0.5%
• CVE-2026-35000 Medium 6.5 ChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read 0.3%
• CVE-2026-33981 High 8.3 Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters 0.5%
• CVE-2026-29065 High 8.8 changedetection.io: Zip Slip vulnerability in the backup restore functionality 0.6%
• CVE-2026-29039 High 8.8 changedetection.io: XPath - Arbitrary File Read via unparsed-text() 0.5%
• CVE-2026-29038 Medium 6.1 changedetection.io: Reflected XSS in RSS Tag Error Response 0.3%
• CVE-2026-27696 High 8.6 changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs 0.5%
• CVE-2026-27645 Medium 6.1 changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response 0.5%
• CVE-2026-25527 Medium 5.3 changedetection.io vulnerable to unauthenticated static path traversal 1.0%
• CVE-2025-62780 Low 3.5 changedetection.io vulnerable to stored XSS in Watch update via API 0.5%
• CVE-2025-52558 High 7.0 ChangeDetection.io XSS in watch overview 0.6%
• CVE-2024-56509 High 8.6 changedetection.io has Improper Input Validation Leading to LFR/Path Traversal 0.7%
• CVE-2024-51998 High 8.6 Path traversal using file URI scheme without supplying hostname in changedetection.io 0.7%
• CVE-2024-51483 Medium 6.9 changedetection.io Path Traversal vulnerability 2.3%
• CVE-2024-34061 Medium 4.3 Reflected cross site scripting in changedetection.io 1.3%
• CVE-2024-32651 Critical 10.0 Server Side Template Injection in Jinja2 allows Remote Command Execution 85.3%
• CVE-2024-23329 Low 3.7 changedetection.io API endpoint is not secured with API token 0.6%