15233 matches found
PYSEC-2026-1615 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
Impact In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for processing. This significantly expands...
MAL-2026-7081 Malicious code in @louisvuitton/configurator-common-lib (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @louisvuitton/configurator-common-lib (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @karakuri-web-fgsfgehfg/common (npm)
--- -= Per source details. Do not edit below this line.=-...
Microsoft Common Data Model SDK Denial of Service Vulnerability
Microsoft Common Data Model SDK Denial of Service Vulnerability...
PYSEC-2026-1261 Microsoft Common Data Model SDK Denial of Service Vulnerability
Microsoft Common Data Model SDK Denial of Service Vulnerability...
DEBIAN-CVE-2026-53588
Bulletin has no description...
DEBIAN-CVE-2026-45092
Bulletin has no description...
EUVD-2026-42019
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
CVE-2026-8377 Improper Authorization in Armiya Technologies' Access Control System
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
CVE-2026-8377
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
PT-2026-56165
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
CVE-2026-36180
creationtimestamp| type| source ---|---|--- 2026-07-06 11:24:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxy52z6su2g...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the operationName and operationNamespace headers, which are not properly filtered by the HTTP header filter. An attacker can cause the backend SOAP servi...
CVE-2026-53131
creationtimestamp| type| source ---|---|--- 2026-07-06 06:48:59+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-25 12:13:00+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mwdqlm7w6q2l 2026-09-29 12:13:39+00:0...
SUSE CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...
RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities
LLM agents are increasingly applied to vulnerability analysis, but existing benchmarks have not kept pace. They typically rely on small non-compilable snippets, focus on binary classification vulnerable or not, and do not account for the risk that publicly-released datasets are part of model...
CVE-2021-4447
creationtimestamp| type| source ---|---|--- 2026-07-05 19:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwbilun7q2i...