123049 matches found
CVE-2026-50289
creationtimestamp| type| source ---|---|--- 2026-07-16 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpx3jzg5o2p 2026-07-16 00:35:08+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839...
CVE-2026-54466
creationtimestamp| type| source ---|---|--- 2026-07-16 00:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpwxxsieh2w 2026-07-17 23:45:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwndmen52g...
CVE-2026-55576
creationtimestamp| type| source ---|---|--- 2026-07-16 00:07:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpwwfqvfb2l...
CVE-2026-56679
creationtimestamp| type| source ---|---|--- 2026-07-16 00:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpwtkfilw2a 2026-09-23 20:35:25+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-vmjq-hvgq-2wv4...
PT-2026-60660
Impact The SQL IMPORT DATABASE statement did not require administrative privileges and passed its source URL to the importer without validation. Any authenticated user with SQL command access not only root/administrators could therefore: - Server-Side Request Forgery CWE-918: cause the server to...
qt6-qtdeclarative security update
6.10.1-1.1 - VectorImage: sanitize source string used in output CVE-2025-14576 Resolves: RHEL-173494...
UBUNTU-CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are configured or when a background cache update happens, unauthenticated attackers can send requests that may cause uninitialized memory access in the NGINX...
The Distributed Open-Source Vulnerability Ecosystem
Identifying known software vulnerabilities is a central task in software supply chain security management. Although publicly available vulnerability information is based on shared standards, different vulnerability scanners often report divergent results for identical software inventories. These...
UBUNTU-CVE-2026-42533
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...
UBUNTU-CVE-2026-56434
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...
PT-2026-60527
Name of the Vulnerable Software and Affected Versions Manyfold versions 0.96.0 through 0.139.0 Description Authenticated users can rename uploaded files using path traversal sequences. This occurs because the app/models/model file.rb file utilizes a user-controlled filename within the...
CVE-2026-11386: Improper Input Validation
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...
samba security update
0:4.23.5-109 - Bump build number 0:4.23.5-108 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba...
ROS-20260716-73-0002
The vulnerability in Chromium is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-47737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress...
CVE-2026-48263
creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kzrgi2f...
CVE-2026-47999
creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...
GHSA-5XPP-75JX-M839 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
CVE-2026-52893
creationtimestamp| type| source ---|---|--- 2026-07-15 23:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w 2026-07-16 00:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i...