1985803 matches found
CVE-2026-104949
creationtimestamp| type| source ---|---|--- 2026-10-21 18:11:59+00:00| seen| https://infosec.exchange/users/cve/statuses/117480247710432547...
OCI-Ansible-Fix-CVE-2026-31431
CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...
EUVD-2026-107473
The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint /admin/v2/worker/connectors and the deprecated functions connectors endpoint /admin/v2/functions/connectors and...
CVE-2026-105936
The Apache Pulsar Functions worker REST API contains a missing authorization check in its deprecated functions connectors endpoints (/admin/v2/functions/connectors and /admin/v3/functions/connectors). While the worker connectors endpoint requires super-user access, the deprecated endpoints return...
CVE-2026-105936 Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint
The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint /admin/v2/worker/connectors and the deprecated functions connectors endpoint /admin/v2/functions/connectors and...
CVE-2026-104948
creationtimestamp| type| source ---|---|--- 2026-10-21 18:11:18+00:00| seen| https://infosec.exchange/users/cve/statuses/117480245065128098...
CVE-2025-71438
creationtimestamp| type| source ---|---|--- 2026-10-21 18:10:39+00:00| seen| https://infosec.exchange/users/cve/statuses/117480242423869345...
CVE-2026-105935
The Apache Pulsar Functions Worker contains a vulnerability where a REST API endpoint for triggering functions publishes caller-supplied values to input topics without verifying if the caller has produce permissions for those specific topics. The worker uses its own broker-client credentials for ...
EUVD-2026-107472
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
CVE-2026-105935 Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Functions Worker performs this publish with its own broker client, which authenticates with the Worker's configured...
DRUPAL-CONTRIB-2026-251
The AI File to Text module extracts text from uploaded documents, including Word, PDF, OpenDocument, CSV, Markdown and plain text files, and exposes that extraction to AI agents and automators as a tool. The module does not sufficiently check whether the current user is permitted to view a file...
CVE-2025-60489
creationtimestamp| type| source ---|---|--- 2026-10-21 18:09:58+00:00| seen| https://infosec.exchange/users/cve/statuses/117480239780353152...
Exploit for CVE-2026-109618
php2shell-check for Claude A passive check for Claude whether...
Exploit for CVE-2026-109618
php2shell-check A passive check for Claude whether a website...
CVE-2024-6423
creationtimestamp| type| source ---|---|--- 2026-10-21 18:09:18+00:00| seen| https://infosec.exchange/users/cve/statuses/117480237129801090...
DRUPAL-CONTRIB-2026-249
This module enables you to restrict user logins on a multi-domain site built with the Domain module, so that users can only log in on the domains assigned to them. The module doesn't sufficiently enforce these restrictions when a user logs in by a method other than the standard login form. This...
EUVD-2026-107471
The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics DELETE /admin/v2/persistent/tenant/namespace/topic/truncate. Truncating a topic moves all subscription cursors of the topic to the end of the topic and deletes the topic's inactive ledgers. Truncating a...
CVE-2026-105934
The Apache Pulsar broker admin REST API contains a missing authorization check (CWE-862) when truncating partitioned topics via the DELETE /admin/v2/persistent/{tenant}/{namespace}/{topic}/truncate endpoint. While non-partitioned topics require tenant admin or superuser roles, the broker fails to...
CVE-2026-105934 Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic
The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics DELETE /admin/v2/persistent/tenant/namespace/topic/truncate. Truncating a topic moves all subscription cursors of the topic to the end of the topic and deletes the topic's inactive ledgers. Truncating a...