59138 matches found
PT-2026-39246
Name of the Vulnerable Software and Affected Versions free5GC versions 4.1.0 through 4.2.1 Description A nil-pointer dereference occurs in the PCF HandleCreateSmPolicyRequest function when a downstream OpenAPI consumer call to the UDR lookup returns a 404 Not Found error. The handler logs the err...
PT-2026-39203
Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.11 Description Direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands. This can lead to complete database compromise, data theft, or system destruction...
emlog SQL注入漏洞
Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.11 had a SQL injection vulnerability. This vulnerability stemmed from direct SQL injections in the article creation and updating functions, which could allow attackers to execute arbitrary S...
PT-2026-39021
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs filesystem where creating multiple files with names that result in the same hash can lead to a transaction abort. This occurs because files with colliding...
CVE-2026-44581
creationtimestamp| type| source ---|---|--- 2026-05-07 23:40:51+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:12+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:0...
CVE-2026-6736
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...
CVE-2026-8142
creationtimestamp| type| source ---|---|--- 2026-05-07 22:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlca2zkgkf2q...
CVE-2026-33811
creationtimestamp| type| source ---|---|--- 2026-05-07 21:57:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7j3x7ns2v 2026-05-08 12:01:02+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoncri5b2g 2026-05-15 16:19:42+00:00| seen|...
CVE-2025-68060
creationtimestamp| type| source ---|---|--- 2026-05-07 21:53:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc7cdvech2w 2026-05-17 08:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlzx5yrq2q2c...
CVE-2026-42449
creationtimestamp| type| source ---|---|--- 2026-05-07 21:51:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc75hcav22e 2026-05-07 23:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcftqxeo72p 2026-05-18 02:07:08+00:00| seen|...
CVE-2026-39817
creationtimestamp| type| source ---|---|--- 2026-05-07 21:30:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5yhwc332k...
CVE-2026-44742
creationtimestamp| type| source ---|---|--- 2026-05-07 21:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5eyncrc2r 2026-06-19 12:45:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ba9994-41dc-45f7-b8e9-ac330a61d59b 2026-06-23...
CVE-2026-44243
creationtimestamp| type| source ---|---|--- 2026-05-07 21:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5bswnv72i 2026-05-12 21:03:25+00:00| seen| https://gist.github.com/trippersham/98c56220f8edca1dd84337d7c1d67182...
CVE-2026-6736
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...
CVE-2026-6736 Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...
CVE-2026-8142 CVE-2026-8142
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...
CVE-2026-8142 CVE-2026-8142
VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the referencia field in the product creation process. An attacker can execute arbitrary JavaScript in the browser of another authenticated user by injecting a crafted value into the referencia field, which i...