122718 matches found
CVE-2025-71401
The connected CVE entry describes a vulnerability in better-auth (npm) before 1.4.2 where an external request can configure baseURL when it is not defined (e.g., BETTER_AUTH_URL unset). An attacker who can trigger the first request after startup can poison the router’s base path, causing all rout...
EUVD-2025-210592
better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...
CVE-2025-71401 better-auth before 1.4.2 basePath Modification DoS
better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...
CVE-2025-71401 better-auth before 1.4.2 basePath Modification DoS
better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...
CVE-2025-71399
Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...
CVE-2026-14864
creationtimestamp| type| source ---|---|--- 2026-08-02 11:34:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3vbkl2dd24...
porterminal v1.0.6
Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...
CVE-2026-67291
creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oiob3iy2t...
Linux Distros Unpatched Vulnerability : CVE-2026-67338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata...
CVE-2026-67298
creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n...
Exploit for CVE-2025-10897
CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...
CVE-2026-67305
creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwrfkiw2h 2026-08-05 02:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msciabr6c623...
CVE-2026-67289
creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140 2026-08-05 02:24:03+00:00| seen|...
CVE-2026-67327
creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22emobp22t 2026-08-01 22:18:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iruraca22 2026-08-01 22:19:08+00:00| seen|...
CVE-2026-17580
creationtimestamp| type| source ---|---|--- 2026-08-01 17:53:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzymh7nm25 2026-08-01 18:45:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24u4wgky2x 2026-08-01 18:45:08+00:00| seen|...
CVE-2026-16090
creationtimestamp| type| source ---|---|--- 2026-08-01 17:37:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz32c2n52x 2026-08-01 18:58:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms25lk44th2p...
CVE-2026-2916
creationtimestamp| type| source ---|---|--- 2026-08-01 17:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxns7zhq24...
GHSA-M4F3-G4CQ-HQRX Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...
Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...