Lucene search
+L

54831 matches found

NVD
NVD
added 2026/07/28 11:17 p.m.9 views

CVE-2026-54638

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

7.5CVSS0.00346EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/28 10:14 p.m.4 views

CVE-2026-54638 td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencryptedmessage.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated makebyte, dataLen before checking the remaining buffer, allowing...

7.5CVSS5.9AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/28 9:56 p.m.9 views

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

Summary Start goshs v2.1.3 with -b 'admin:' -sftp. No -fkf. SFTP accepts connections without password. CVE-2026-40884 blocks the empty-username variant -b ':pass'. The empty-password variant bypasses that fix. CVE-2026-40884 CVE-2026-40884 GHSA-c29w-qq4m-2gcv, Apr 13 2026 reported the...

9.8CVSS5.9AI score0.00478EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2026/07/28 6:5 p.m.5 views

RLSA-2026:46394 Important: go-fdo-client security update

go-fdo-client is the device-side implementation of FIDO Device Onboard specification in Go. It provides an FDO client that interacts with FDO manufacturer and owner servers to perform device on-boarding. Security Fixes: crypto/x509: golang: golang crypto/x509: Denial of Service via excessive...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/07/28 6:5 p.m.6 views

go-fdo-client security update

An update is available for go-fdo-client. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list go-fdo-client is the device-side implementation of FIDO Device Onboard...

7.5CVSS6.9AI score0.00591EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/28 5:53 p.m.30 views

CVE-2026-14869 terraform-mcp-server vulnerable to server side request forgery leading to token exposure

The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled...

8.6CVSS0.00293EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/28 4:35 p.m.4 views

CVE-2026-43910

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:12+00:00| published-proof-of-concept| https://github.com/appium/java-client/security/advisories/GHSA-28f5-38xr-jh2w...

8.2CVSS5.8AI score0.00235EPSS
SaveExploits1References1
OSV
OSV
added 2026/07/28 4:32 p.m.3 views

GHSA-PP92-CRG2-GFV9 OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

Summary When an application uses OAuth2::Client typically via an OAuth2::AccessToken and the configured authorization server returns a redirect whose Location header is a protocol-relative URI of the form //attacker.example/leak, OAuth2::Clientrequest resolves the redirect with...

8.6CVSS5.8AI score0.00268EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/28 4:29 p.m.36 views

CVE-2026-54603 OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Clientrequest overrides the request authority, so the bearer Authorization header is sent to an...

8.6CVSS0.00268EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/28 4:29 p.m.20 views

CVE-2026-54603

Summary (CVE-2026-54603) OAuth2 (Ruby) versions 0.4.0 through 2.0.21 leak credentials via protocol-relative redirects during the OAuth2::Client#request flow. When a 301/302/303/307 redirect’s Location header is protocol-relative (//host/...), the client’s base URL is overridden and the original A...

8.6CVSS5.9AI score0.00268EPSS
SaveExploits0References3
HackRead
HackRead
added 2026/07/28 4:28 p.m.7 views

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/07/28 3:38 p.m.9 views

EUVD-2026-49879

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS5.9AI score0.00235EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/28 3:38 p.m.3 views

CVE-2026-43910 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/07/28 3:38 p.m.32 views

CVE-2026-43910

CVE-2026-43910 affects the Appium Java Client (8.2.1–10.1.1). When directConnect(true) is enabled, AppiumCommandExecutor.setDirectConnect() rebuilds the client’s server URL from directConnectHost, directConnectPort, and directConnectPath in the server’s NEW_SESSION response, validating only HTTPS...

8.2CVSS5.9AI score0.00235EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/07/28 3:38 p.m.37 views

CVE-2026-43910 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

8.2CVSS0.00235EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/07/28 3:32 p.m.36 views

CVE-2026-47427 GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

7.5CVSS0.00394EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/28 3:4 p.m.9 views

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

8.8CVSS7.2AI score0.00454EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/28 3:4 p.m.8 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS7.9AI score0.00454EPSS
SaveExploits0References5
Apache Tomcat
Apache Tomcat
added 2026/07/28 2:29 p.m.9 views

Fixed in Apache Tomcat 11.0.25

Low: DoS in WebSocket chat example CVE-2026-66299 The WebSocket chat example provided an unbounded buffer for undelivered messages. A maliciously slow client could cause the buffer to grow continuously, eventually leading to an memory exhaustion and failure of the Tomcat process. This was fixed...

7.5CVSS6AI score0.00451EPSS
SaveExploits0Affected Software1
Apache Tomcat
Apache Tomcat
added 2026/07/28 2:29 p.m.7 views

Fixed in Apache Tomcat 10.1.58

Low: DoS in WebSocket chat example CVE-2026-66299 The WebSocket chat example provided an unbounded buffer for undelivered messages. A maliciously slow client could cause the buffer to grow continuously, eventually leading to an memory exhaustion and failure of the Tomcat process. This was fixed...

7.5CVSS6AI score0.00451EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder