261584 matches found
CVE-2026-20304
creationtimestamp| type| source ---|---|--- 2026-08-05 16:51:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24 2026-08-05 17:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse23e2oxs2p 2026-08-06 03:17:09+00:00| seen|...
CVE-2026-9077
Summary of CVE-2026-9077 (IBM Langflow OSS) : Langflow OSS versions 1.0.0–1.10.3 allow remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host. The vulnerability stems from weaknesses in MCP command/...
CVE-2026-70607 Electron: window.open features string controls some window options considered privileged
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, some window options supplied by web content in the window.open features string were applied to the new BrowserWindow without an allowlist...
CVE-2026-16442
A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single Sign-On endpoint fails to check if a provider is restricted to account linking only. This allows an attacker with contr...
ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in python-dotenv - Patched by Root
Root has patched CVE-2026-28684 in the python-dotenv package for Root:PyPI. Multiple fixed versions available...
CVE-2026-69088
creationtimestamp| type| source ---|---|--- 2026-08-05 16:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364 2026-08-06 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364...
ROOT-APP-PYPI-CVE-2024-22195 CVE-2024-22195 in Jinja2 - Patched by Root
Root has patched CVE-2024-22195 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
CVE-2026-9192 Authentication bypass in Progress MarkLogic Server ODBC App Server
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...
CVE-2026-48912
creationtimestamp| type| source ---|---|--- 2026-08-05 15:31:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/igyfohm5byanp...
CVE-2026-15572 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation
A flaw was found in Keycloak's Dynamic Client Registration DCR security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mappers a client can use, fails to re-validate the mapper type during a client update if the mapper's configuration remains...
CVE-2026-71269
creationtimestamp| type| source ---|---|--- 2026-08-05 15:08:37+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043528766793055...
CVE-2026-61483
creationtimestamp| type| source ---|---|--- 2026-08-05 14:30:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/jhvy6kzsbsna4...
CVE-2026-67623
creationtimestamp| type| source ---|---|--- 2026-08-05 14:15:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jze72nb5aends...
CVE-2026-71294
creationtimestamp| type| source ---|---|--- 2026-08-05 14:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msdot46tz22p...
ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3.11 - Patched by Root
Root has patched CVE-2026-3644 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-71293
Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-factor recovery codes with no access restriction...
Malicious code in cors-security (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cff2c95bb175e36d5cb7a6e4880ed0f8816cbfb1dc7acef5d8173cf2cc40bb The CommonJS entry point of [email protected] exposes a getPlugin API that issues an HTTPS GET to the hardcoded host workconfig.vercel.app and pass...
ROOT-APP-NPM-CVE-2025-68428 CVE-2025-68428 in jspdf - Patched by Root
Root has patched CVE-2025-68428 in the jspdf package for Root:npm. Multiple fixed versions available...