122383 matches found
postcss: PostCSS: Information disclosure via crafted sourceMappingURL
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...
CVE-2026-67623
creationtimestamp| type| source ---|---|--- 2026-08-05 14:15:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jze72nb5aends...
CVE-2026-71294
creationtimestamp| type| source ---|---|--- 2026-08-05 14:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msdot46tz22p 2026-09-13 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102176 2026-09-14 00:00:30+00:00| published-proof-of-concept|...
CVE-2026-71287
creationtimestamp| type| source ---|---|--- 2026-08-05 13:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dpeo2ycooev7n...
LuLu v4.5.1
LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page. Read more...
CVE-2026-71256
creationtimestamp| type| source ---|---|--- 2026-08-05 13:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdnoeonar2o...
GHSA-PWXH-7358-JQ2X
creationtimestamp| type| source ---|---|--- 2026-08-05 13:31:17+00:00| seen| https://gist.github.com/alon710/63aaf77a9f4550ada3647ec00940f1b7...
CVE-2026-71259
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
CVE-2026-64634
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-64630
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-58075
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-64631
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-58074
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-18809
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlptvmrx2l 2026-09-06 20:11:37+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3muushuymtk2n...
GHSA-M4HF-6VGR-75R2
creationtimestamp| type| source ---|---|--- 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b...
GHSA-2F54-P244-32Q6
creationtimestamp| type| source ---|---|--- 2026-08-05 12:32:01+00:00| seen| https://gist.github.com/alon710/2d05301b2f45169422f4602c106418b3...
MAL-2026-12314 Malicious code in @copilot-mcp/apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95a10852a2ffe12a9d2b124d014e2092dc2f2d45821ab92feae8cb5308b94ea install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript with 'do shell script' on macO...
CVE-2026-71259
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
CVE-2026-71259
ESPHome (up to 2026.7.0-dev) is affected by an operator-precedence bug in the cv.url() validator within esphome/config_validation.py. The condition if parsed.scheme and parsed.netloc or parsed.scheme == "file" incorrectly permits file:// URIs to bypass validation, affecting the url: field of the ...
CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...