121898 matches found
CVE-2026-47834
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15...
CVE-2026-81027
creationtimestamp| type| source ---|---|--- 2026-08-26 20:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4qtslaz2z...
flowsint v1.2.12
Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...
MISP v2.5.45
MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...
CVE-2026-63179
Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...
curl: 36: HTTP upload resume offset consumed twice after early 307/308 redirect
Summary A read-backed HTTP POST using CURLOPTRESUMEFROMLARGE with a non-seekable source silently uploads the wrong data when the server returns a 307 or 308 redirect before the request body is sent. curleasyperform returns CURLEOK, so the caller cannot detect the substitution. The bug is in...
crowdsec v1.8.0-rc2
CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...
CVE-2026-81035
creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/anvxu5rxth3qo...
CVE-2026-81034
creationtimestamp| type| source ---|---|--- 2026-08-26 16:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5btja4khie34t...
CVE-2026-75062
creationtimestamp| type| source ---|---|--- 2026-08-26 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtyptvornt23 2026-08-26 18:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywfxuqju2e...
CVE-2026-74848
creationtimestamp| type| source ---|---|--- 2026-08-26 15:37:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/isgyihvqh5n7s 2026-08-27 10:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jciqmqkiujfkw...
infisical v0.162.24
The open-source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Slack | Infisical Cloud | Self-Hosting | Docs | Website | Twitter | Hiring Remote/SF Introduction Infisical is the open source security infrastructure platform that teams us...
CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...
CVE-2026-18080
creationtimestamp| type| source ---|---|--- 2026-08-26 12:21:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy52s6sgxysq2 2026-08-26 12:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtye4fhhlk2e 2026-08-26 23:00:03+00:00| published-proof-of-concept|...
CVE-2026-77551
creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtybuvhrho24 2026-08-27 07:00:03+00:00| seen| https://t.me/GithubRedTeam/99900 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LI...
pentx-vapt-skill
Pentx — AI-Powered 5-Phase VAPT Agent Pentx is an open-so...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an improper Unicode handling vulnerability due to Python setuptools
Summary Python setuptools is used by IBM Integrated Analytics System as a package management library for downloading, building, installing, and managing Python packages. CVE-2026-59890 affects setuptools versions prior to 83.0.0, where the FileList class applies MANIFEST.in exclusion directives b...
CVE-2026-77536
creationtimestamp| type| source ---|---|--- 2026-08-26 10:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty4tyavgg25...