271548 matches found
CVE-2026-71866 Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8.19.0 until 8.21.0, a double quote in a schema property name is emitted into the generated zod.object... schema without safe encoding. This permits attacker-controlled JavaScrip...
CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-60903
creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-44901
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge in framework/wazuh/core/results.py trusts the sortcasting field in a cluster worker's JSON response. During a distributed API merge...
CVE-2026-61212
creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu46d54tyk24...
CVE-2026-60850
creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-73902
creationtimestamp| type| source ---|---|--- 2026-08-19 17:17:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71160
creationtimestamp| type| source ---|---|--- 2026-08-19 17:16:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60849
creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrbn4xffo2y...
CVE-2026-70686
creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2xrbs46p2u...
Malicious code in ai-texts-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...
CVE-2026-72530
TrueConf Server (versions 5.3.X–5.3.9, 5.4.X–5.4.9, 5.5.X–5.5.5, and earlier) is vulnerable to a sandbox escape via improper code generation management. A remote unauthenticated attacker with network access to port 4307/TCP (open by default) can deliver a specially crafted script that breaks out ...
EUVD-2026-62587
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-70770
creationtimestamp| type| source ---|---|--- 2026-08-19 16:52:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu566dyir62c...
CVE-2026-70680
creationtimestamp| type| source ---|---|--- 2026-08-19 16:52:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61284
creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70815
creationtimestamp| type| source ---|---|--- 2026-08-19 16:50:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...