123230 matches found
CVE-2026-42527
Apache Camel is vulnerable to a deserialization of untrusted data (CWE-502) issue due to a permissive default ObjectInputFilter. The filter pattern java.**;javax.**;org.apache.camel.**;!* admits java.net.URL and java.net.InetAddress. When deserializing a HashMap containing java.net.URL keys, the ...
EUVD-2026-41825
Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...
CVE-2026-11962
creationtimestamp| type| source ---|---|--- 2026-07-06 07:54:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmfeg4bb2b 2026-07-06 18:00:19+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mpyoa3zgs42k 2026-07-09 00:29:02+00:00| seen|...
SUSE-SU-2026:2774-1 Security update 5.1.4 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.4 Added note about migration for SUSE Linux Enterprise Server 16 on SSH managed minions Product Migration from SUSE Linux Enterprise Server 15 SP7 to 16.0 SUSE Liberty Linux 9.6 Support New...
CVE-2025-45619
creationtimestamp| type| source ---|---|--- 2026-07-06 06:18:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxgywyzrb2b...
CVE-2025-50492
creationtimestamp| type| source ---|---|--- 2026-07-06 06:08:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxggl6bz52i...
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs,...
CVE-2023-48056
creationtimestamp| type| source ---|---|--- 2026-07-06 04:51:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc6e4cbb2f...
CVE-2026-14787
creationtimestamp| type| source ---|---|--- 2026-07-06 04:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpx7gnkinz2c 2026-07-07 23:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq3sqqm3dl2y...
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...
CVE-2020-21733
creationtimestamp| type| source ---|---|--- 2026-07-06 02:18:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzmff2qf2b...
CVE-2026-14803
creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...
CVE-2021-28927
creationtimestamp| type| source ---|---|--- 2026-07-06 01:58:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwyiouca52i...
CVE-2026-49420
creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...
CVE-2026-14771
creationtimestamp| type| source ---|---|--- 2026-07-06 00:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwszzn37a2n 2026-07-07 08:03:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25ejsrx42g...
CVE-2026-10657
creationtimestamp| type| source ---|---|--- 2026-07-06 00:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwsd2euuv22 2026-07-07 12:06:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2kwdklox2s...
CVE-2026-59519
creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...
PT-2026-55914
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
CVE-2026-54893: Improper Encoding or Escaping of Output
URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address...
CVE-2025-8591: Improper Neutralization of Input During Web Page Generation
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...