24401 matches found
PT-2026-64717
In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iio event getfd creates the event file descriptor with anon inode getfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the...
Linux Distros Unpatched Vulnerability : CVE-2026-64502
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: adsigmadelta: fix clearpendingevent for registerless devices adsigmadeltaclearpendingevent falls through to the status register read path for devices...
CVE-2026-49158
creationtimestamp| type| source ---|---|--- 2026-07-24 23:13:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgi4fyong2n 2026-07-27 17:01:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnequj7z42o 2026-07-28 17:22:10+00:00| seen|...
GHSA-W8X7-H2PX-XMQ8 Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings
Summary When an authenticated recipient of a single-file share opens the file event stream GET /api/v4/file/events?uri=, Cloudreve validates the URI by listing it and then subscribes the caller to parent.ID. For a single-file share, the share navigator resolves the bare share-root URI to the...
Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings
Summary When an authenticated recipient of a single-file share opens the file event stream GET /api/v4/file/events?uri=, Cloudreve validates the URI by listing it and then subscribes the caller to parent.ID. For a single-file share, the share navigator resolves the bare share-root URI to the...
CVE-2026-64873
creationtimestamp| type| source ---|---|--- 2026-07-24 20:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg63us7or22...
EUVD-2026-42621
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config...
GHSA-FFPJ-XV5C-P3GW Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Summary Two regexes in backend/openwebui/utils/middleware.py that parse skill-mention tags backtrack in On² on input that contains . Both run synchronously, on the asyncio event loop, on every chat completion with no feature gate. Because the default deployment is a single uvicorn worker, one suc...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
CVE-2026-45812 Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report Handler
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI advertising report event bundles multiple reports, NimBLE miscalculated the offset to the next report. This can cause the host to read past the end of the...
CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...
CVE-2026-45811
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...
CVE-2026-45811
CVE-2026-45811: Buffer Copy without Checking Size of Input in Apache NimBLE's HCI socket transport allows a buffer overflow because the received HCI event might not fit the configured event pool. Affects NimBLE up to version 1.9.0; upgrade to 1.10.0 to fix. Exploitation requires either a misconfi...
CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...
PYSEC-2025-194
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
EUVD-2026-48550
The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.14. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to grant EventON...
WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Event Tickets versions = 5.29.0.1...
CVE-2026-12981
creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...
PT-2026-64434
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An authenticated recipient of a single-file share can access file-activity metadata for other files and folders located in the owner's parent folder that were not intended to be shared. This occur...