37417 matches found
CVE-2026-59961
creationtimestamp| type| source ---|---|--- 2026-07-14 08:28:11+00:00| seen| https://bsky.app/profile/troglobit.com/post/3mqlryf65pc2o...
CVE-2026-60103
creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...
CVE-2026-12271
creationtimestamp| type| source ---|---|--- 2026-07-14 03:14:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlai7m3x32c...
MAL-2026-10522 Malicious code in flick-test-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in flick-test-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f05e70375ac31032fb4fc3abf302d1c1122bf01504f810aa74d9fe59066d36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious Package
Overview flick-test-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-57371
creationtimestamp| type| source ---|---|--- 2026-07-14 01:08:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzgmybpb2c 2026-07-16 08:15:03+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs6qb47h2p...
EUVD-2026-43563
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...
Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Summary The official Kimai Docker image ships with APPSECRET=changethistosomethingunique as the default environment variable. The Docker entrypoint does not override or validate this value. Any Kimai instance deployed using the Docker image without explicitly setting APPSECRET runs with a...
PT-2026-60091
Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.58.0 Description The official Docker image includes a default environment variable APP SECRET set to a publicly known value. Because the Docker entrypoint does not validate or override this value, instances deployed...
PT-2026-58135
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A use-after-free condition exists in Windows App Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
CVE-2026-49784: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
PT-2026-58202
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...
CVE-2026-48571: Use After Free
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
PT-2026-58272
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...
PT-2026-58379
Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows App Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...
CVE-2026-58595: Improper Restriction of Rendered UI Layers or Frames
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-50400: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-50356: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...