67623 matches found
SUSE CVE-2026-14761
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function rstrndup/rstrappend of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be...
CVE-2026-53878
creationtimestamp| type| source ---|---|--- 2026-07-07 15:04:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2uvi6mb22w 2026-07-07 16:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2y6fbxvq23 2026-08-13 13:08:53+00:00| seen|...
AgentScope stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string run ID is appended and rendered as HTML. This allows ...
PYSEC-2026-1775 OAuth2 client ID and secret exposed through the web browser
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data...
Sentry improperly authorizes muting of alert rules
ImpactAn authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...
SQL injection in litellm
A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'userid' parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability b...
MINI-8RQG-VHVG-WQ2V
Bulletin has no description...
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account the attackers used to keep access during the May 2025...
CVE-2026-53483
creationtimestamp| type| source ---|---|--- 2026-07-07 13:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2olmx4az2r 2026-07-07 15:42:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2wy66mom2o 2026-07-09 03:07:07+00:00| seen|...
389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. After a successful SASL bind with integrity protection SSF 0, an authenticated attacker can send a specially crafted oversized LDAP UNBIND packet that is copied into a 512-byte heap receive buffer...
GHSA-H9QX-V5XP-PH8P EGroupware has a Remote Code Execution Vulnerability
Summary A critical vulnerability has been identified in EGroupware that may lead to Remote Code Execution RCE. The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior...
MAL-2026-9954 Malicious code in zzjinavcssvn (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9547 Malicious code in xwandservmtg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9103 Malicious code in vand3flmy1778552525 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9091 Malicious code in v4zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8938 Malicious code in swkefepbkjgqj (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8213 Malicious code in oaigx7857181 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7956 Malicious code in lbrssypnbowmaf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7455 Malicious code in myproject234 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-48891
creationtimestamp| type| source ---|---|--- 2026-07-07 11:48:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y 2026-07-07 12:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y...