10912 matches found
CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
CVE-2026-16610
creationtimestamp| type| source ---|---|--- 2026-07-30 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrtm5z3l4c2i 2026-07-30 05:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtnsz3jvs2r 2026-07-30 05:02:09+00:00| seen|...
PT-2026-66608
Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn is an AI-powered C2 and red-team operations framework. The lazyc2.py component registers an unauthenticated Socket.IO input event handler that dispatches the value...
PT-2026-66407
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Permission Model enforcement allows the trace events.createTracing.enable function to write trace logs outside the boundaries defined by the...
CVE-2026-6267
creationtimestamp| type| source ---|---|--- 2026-07-29 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssq4z4eg24 2026-07-29 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssz3rn6z23 2026-07-30 03:11:06+00:00| seen|...
CVE-2026-67429
creationtimestamp| type| source ---|---|--- 2026-07-29 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsp3jcbsn23 2026-07-29 20:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsporaviy2l 2026-07-30 16:35:15+00:00|...
CVE-2026-54680
creationtimestamp| type| source ---|---|--- 2026-07-29 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsi5rwobd22 2026-07-29 18:35:06+00:00| published-proof-of-concept| https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h 2026-07-29...
CVE-2023-22490
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:51+00:00| seen| https://t.me/CVEhub/6812 2026-07-29 12:03:19+00:00| seen| https://t.me/sysadminup/1543 2026-07-30 00:01:27+00:00| seen| https://t.me/CVEhub/6812 2026-07-30 00:03:05+00:00| seen| https://t.me/sysadminup/1543 2026-07-31...
CVE-2026-18191
creationtimestamp| type| source ---|---|--- 2026-07-29 08:45:02+00:00| seen| https://www.twcert.org.tw/en/cp-139-11049-db9ae-2.html 2026-07-29 09:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrl7kbimf2u...
CVE-2026-64556
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...
EUVD-2026-50201
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...
CVE-2026-64556
CVE-2026-64556 pertains to the Linux kernel PMU subsystem (perf/core). When a performance event group leader is removed during process exit, its surviving siblings can remain active and still linked to the removed leader’s list, leaving the PMU context active list in a potentially inconsistent st...
CVE-2026-12144
creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...
CVE-2026-57510 SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC
SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs...
CVE-2026-62431
creationtimestamp| type| source ---|---|--- 2026-07-28 14:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnys3koc2s 2026-07-28 15:43:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqtfc6lg2u 2026-07-29 13:55:22+00:00| seen|...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
