491341 matches found
Exploit for CVE-2026-21589
atlassian-cve-2026-21589-check Standalo...
Exploit for Authentication Bypass by Spoofing in Beyondtrust Remote_Support
beyondtrust-remote-support-cve-2026-102764-check...
SUSE CVE-2026-114609
fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...
CLSA-2026-1786360814 avahi: Fix of 3 CVEs
CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion...
CVE-2026-115931
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads...
Exploit for CVE-2026-54668
CVE-2026-54668 — PoC: XXE in Kitodo.Production XMLUtils Р...
CLSA-2026-1792794952 python3.9: Fix of CVE-2026-12345
CVE-2026-12345: fix symlink race in tempfile.TemporaryDirectory cleanup that could delete or chmod files outside the temporary directory...
EUVD-2026-105028
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock- link directory name...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via SQLite side-file handling in readwrite.py on Windows, where a local attacker can plant adversarial -wal or -journal side files adjacent to the lock database in a shared directory such ...
EUVD-2026-105260
virtualenv: Downloaded wheel selection and caching precede verification...
GHSA-FC2G-4W5P-6WHM virtualenv: Seeded files retain permissions from an older cache
Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current umask. A cache populated under permissive permissions can therefore produce files with wider access in later environments. Anthropic's OSS Scanner reported this as ANT-2026-487MH6OW i...
virtualenv: Seeded files retain permissions from an older cache
Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current umask. A cache populated under permissive permissions can therefore produce files with wider access in later environments. Anthropic's OSS Scanner reported this as ANT-2026-487MH6OW i...
GHSA-HHXQ-47XX-J5XX virtualenv: Seed replacement does not contain metadata deletion paths
Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulting paths without checking containment within the environment. Anthropic's OSS Scanner reported this as ANT-2026-SXOEHWP7 in virtualenv-20261015-005, received on 15 October 2026...
virtualenv: Seed replacement does not contain metadata deletion paths
Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulting paths without checking containment within the environment. Anthropic's OSS Scanner reported this as ANT-2026-SXOEHWP7 in virtualenv-20261015-005, received on 15 October 2026...
EUVD-2026-105300
virtualenv: Seed replacement does not contain metadata deletion paths...
CVE-2026-115801
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hiddendim/classnum results in out-of-bounds read...
CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads...
CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads...
CVE-2026-115931
The Postiz application contains a vulnerability where the backend fails to restrict which functions can be requested via connected channels. This allows a signed-in user to call internal helper functions, leading to arbitrary file read and backend crash . By providing a file path as a stored toke...
CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads...