Lucene search
+L

44922 matches found

Github Security Blog
Github Security Blog
added 2026/08/20 6:34 p.m.5 views

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

Summary userpassword.Compare substituted a placeholder hash derived from the well-known string "hunter2" when the stored hash was empty. Submitting "hunter2" therefore matched accounts with no password hash nonexistent users and SSO-only users and a subsequent login-type check returned an HTTP 40...

5.5AI score
SaveExploits0References8Affected Software1
CVE
CVE
added 2026/08/20 6:25 p.m.22 views

CVE-2026-62315

Frappe (full-stack web application framework) is affected by a type confusion vulnerability in frappe.client.set_value (frappe/client.py) in version 16.31.0 and earlier . The function validates a dictionary supplied via the fieldname parameter against forbidden standard and child-table fields bef...

7.1CVSS5.4AI score0.0028EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/20 6:25 p.m.8 views

CVE-2026-62315 Frappe: Mass assignment via set_value

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.setvalue in frappe/client.py checks a dictionary supplied through the fieldname parameter against forbidden standard and child-table fields before parsing the dictionary into individual field names. An...

7.1CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/20 6:25 p.m.12 views

EUVD-2026-63539

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.setvalue in frappe/client.py checks a dictionary supplied through the fieldname parameter against forbidden standard and child-table fields before parsing the dictionary into individual field names. An...

7.1CVSS5.4AI score0.0028EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/20 6:15 p.m.23 views

CVE-2026-66785

Submariner is affected by a critical traffic-hijacking flaw (CVSS 9.9 ). A malicious connected cluster (spoke) can publish a specially crafted network endpoint whose unvalidated endpoint.spec.subnets are propagated into WireGuard allowedips or IPSec configurations on peer clusters. This allows th...

9.9CVSS5.6AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 6:07 p.m.20 views

CVE-2026-61663

The render_object_structure view in django CMS (4.0.0–5.0.x) lacked object-level authorization for non-PageContent models using PlaceholderRelationField. An authenticated staff user without cms.use_structure or model-level permissions could request the structure endpoint with guessed IDs to discl...

4.3CVSS5.3AI score0.00199EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/20 6:04 p.m.29 views

CVE-2026-54624 django CMS: Structure endpoint bypasses page-view permission

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, renderobjectstructure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling usercanviewpage. Any staff account can request a restricted...

6.5CVSS0.00244EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/20 6:04 p.m.11 views

CVE-2026-54624 django CMS: Structure endpoint bypasses page-view permission

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, renderobjectstructure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling usercanviewpage. Any staff account can request a restricted...

6.5CVSS5.4AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 6:04 p.m.12 views

EUVD-2026-63567

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, renderobjectstructure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling usercanviewpage. Any staff account can request a restricted...

6.5CVSS5.3AI score0.00244EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/20 4:43 p.m.18 views

CVE-2026-71428

CVE-2026-71428 is a Server-Side Request Forgery (SSRF) in the unstructured Python library (versions 0.4.7 through 0.24.0 ). The url argument of partition, partition_html, and partition_md is fetched without host validation in unstructured/partition/auto.py, unstructured/partition/html/partition.p...

9.3CVSS5.3AI score0.0025EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/20 3:57 p.m.28 views

CVE-2026-63044 Apache InLong: Authenticated SSRF via POST /api/node/testConnection

Server-Side Request Forgery SSRF vulnerability in Apache InLong. Any authenticated user no admin role required can cause the InLong Manager server to make outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This issue affects Apache InLong: from 2.0.0 before 2.4.0...

0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/20 3:22 p.m.8 views

CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

5.5CVSS5.5AI score0.00172EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/20 11:16 a.m.6 views

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 10:39 a.m.27 views

CVE-2026-73198 Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS0.00347EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 10:39 a.m.11 views

EUVD-2026-63244

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

7.5CVSS5.5AI score0.00347EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 10:39 a.m.18 views

CVE-2026-73198

FreeIPA is vulnerable to an unauthenticated denial-of-service via the /ipa/i18n_messages endpoint. A remote attacker can send an arbitrarily large request body, causing memory exhaustion and service degradation. The root cause is an unbounded request body read with no size limit enforced. CVSS 3....

7.5CVSS5.4AI score0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 10:31 a.m.30 views

CVE-2026-73197 Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

7.5CVSS0.00347EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 10:31 a.m.9 views

EUVD-2026-63240

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

7.5CVSS5.5AI score0.00347EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/20 10:31 a.m.8 views

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

7.5CVSS5.5AI score0.00347EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/20 8:20 a.m.8 views

EUVD-2026-63224

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...

5.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder