123175 matches found
GHSA-V64M-XXFW-HRV6
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...
GHSA-MP3F-59PG-C5PP
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...
GHSA-47FR-JW86-C3FJ
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...
GHSA-72J9-356V-88XQ
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgcfkjb2s...
CVE-2026-53648
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcgbl4ul2j...
GHSA-6WFJ-RWM7-3542
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:31+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcfxrzrc23...
PT-2026-56145
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, database credential fields redis password, keydb password, dragonfly password, clickhouse admin user, clickhouse admin password, postgres user, mysql user are validated onl...
PT-2026-56243
Name of the Vulnerable Software and Affected Versions Actual versions prior to 26.7.0 Description A missing authorization issue allows a shared user with user access on a budget file to perform file management actions reserved for the owner or an administrator. This occurs because the...
PT-2026-56140
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...
PT-2026-56127
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolated into shell commands without sufficient encoding, allowing an authenticated user to inject commands executed on the...
PT-2026-56252
Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated user capable of creating or modifying chart definitions, or submitting chart data requests containing quota filters, can inject SQL into queries executed against configured...
PT-2026-56138
Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.474 Description An issue exists in the file upload endpoint app/Http/Controllers/UploadController.php used for database backup restore uploads. The system fails to enforce file type or size validation, whic...
CVE-2026-11348: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...
PT-2026-56183
Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...
CVE-2026-55592: Improper Neutralization of Input During Web Page Generation
Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it directly to an iframe source without scheme validation. If a logged-in user opens a crafted workspace link containing a javascript: URL, JavaScript runs on the Dashy...
PT-2026-56177
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.0 Description A bug in the /ui/dependencies scheduling graph endpoint allows an authenticated UI user with read permissions on some Dags to enumerate identifiers of other Dags they are not authorized to rea...
Zeek 8.0.9
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
CVE-2026-49296: Authorization Bypass Through User-Controlled Key
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
CVE-2025-68052
creationtimestamp| type| source ---|---|--- 2026-07-06 23:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpz7t2bl2m2n...
CVE-2026-35361
creationtimestamp| type| source ---|---|--- 2026-07-06 23:11:39+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36 2026-07-07 00:00:03+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36...