39343 matches found
CVE-2026-37525
AGL app-framework-binder afb-daemon through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The onsupervisioncall function in src/afb-supervision.c explicitly nullifies the request credentials by calling afbcontextchangecred&xreq-context, NULL before...
CVE-2019-25547
creationtimestamp| type| source ---|---|--- 2026-04-30 23:13:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkqqim32k72k...
CVE-2026-7435
creationtimestamp| type| source ---|---|--- 2026-04-30 22:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqpl5zgq22v...
CVE-2026-4503
creationtimestamp| type| source ---|---|--- 2026-04-30 21:45:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326 2026-04-30 22:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t...
CVE-2026-3861
LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causing the iOS device to become temporarily...
Missing Authorization
Overview org.jenkins-ci.plugins:github-branch-source is a multibranch projects and organization folders from GitHub. Maintained by CloudBees, Inc. Affected versions of this package are vulnerable to Missing Authorization in the GitHubAppCredentials descriptor through the testConnection handler. A...
CVE-2026-7501: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The...
WOOTdroid: Whole-System Online On-Device Tracing for Android
System auditing on Android faces two problems. First, existing syscall tracers lose events under load, silently overwriting entries faster than a user space reader can drain them. Second, security-relevant application behavior is mediated through Binder, Android's kernel IPC mechanism, and is...
CVE-2018-25310
creationtimestamp| type| source ---|---|--- 2026-04-29 20:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknx4o6xr22e...
CVE-2018-25316
creationtimestamp| type| source ---|---|--- 2026-04-29 20:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwr3n25e2k 2026-04-29 20:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknyiqt73m2e 2026-05-04 20:07:07+00:00| seen|...
CVE-2026-40229
creationtimestamp| type| source ---|---|--- 2026-04-29 18:40:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknqrw4wum2o...
webkitgtk: Processing maliciously crafted web content may disclose internal states of the app
A flaw was found in WebKitGTK. Processing malicious web content can cause a memory initialization issue due to improper memory handling and result in the disclosure of the internal states of the application...
Malicious Package
Overview apple-app-store-server-library-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-42522
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...
CVE-2026-42522
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...
CVE-2026-42522
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...
CVE-2026-42522
The Jenkins GitHub Branch Source Plugin (versions 1967.vdea_d580c1a_b_a_ and earlier) contains a missing permission check in a method implementing form validation. This flaw allows attackers with Overall/Read permission to perform a connection test to an attacker-specified URL using attacker-spec...
CVE-2026-42522
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...
CVE-2026-7275
creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a 2026-07-13 22:00:04+00:00| seen|...
com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (3.0.2.release)
org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...