147907 matches found
MINI-F7XG-MW33-JVWX
Bulletin has no description...
EUVD-2026-63579
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "typeof signature !== 'string' || await verify...", so when the...
CVE-2026-72861 Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "typeof signature !== 'string' || await verify...", so when the...
CVE-2026-72861 Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "typeof signature !== 'string' || await verify...", so when the...
CVE-2026-72861
In Appwrite templates' github-issue-bot, verifyWebhook uses an inverted condition (typeof signature !== 'string' || (await verify(...))) that short-circuits to success when the X-Hub-Signature-256 header is absent, skipping HMAC verification. Unauthenticated callers can then post arbitrary commen...
DEBIAN-CVE-2026-53583
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...
MINI-W2X3-3GW9-2C5R
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-53959
creationtimestamp| type| source ---|---|--- 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/OaQKbbdvw00bB0UsV4uIS74p-Dstov7w7gsjctrALY9lZiQ 2026-08-20 03:00:04+00:00| published-proof-of-concept| Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uKn9kN9IGVXWKzWNyM 2026-08-21 00:00:12+00:00|...
PT-2026-79116
Name of the Vulnerable Software and Affected Versions appwrite/templates affected versions not specified Description The github-issue-bot templates contain a logic error in the GitHub webhook signature verification process. The verifyWebhook function in node/github-issue-bot/src/github.js and...
Linux Distros Unpatched Vulnerability : CVE-2026-64728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS...
CVE-2026-76850
creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...
MINI-3RRQ-C2HP-R65V
Bulletin has no description...
MINI-4CG3-RC6F-XG6P
Bulletin has no description...
CVE-2026-58438
A flaw was found in Gitea. This vulnerability, identified as an Insecure Direct Object Reference IDOR, exists within the issue-dependency removal function. A remote attacker with write access to issues in one repository can exploit this flaw to remove a dependency link to an issue in a private...
DRUPAL-CONTRIB-2026-102
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
DRUPAL-CONTRIB-2026-101
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
DRUPAL-CONTRIB-2026-100
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
CVE-2026-72357
A flaw was found in the Linux kernel's uprobes/x86 component. The inuprobetrampoline function incorrectly uses the current process's memory management current-mm for Virtual Memory Area VMA lookups during the unregistration process. This occurs because the lookup is performed in the tracer's...