flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

GCPBucketBrute

GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keywor...

EUVD-2026-122937

Active Storage: Unsigned Content-Type in GCS direct uploads with cachecontrol...

Active Storage: Unsigned Content-Type in GCS direct uploads with cache_control

Impact When a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URLs with V4, and the V4 signature covers only the Cache-Control and Host headers. A direct-upload client can therefore send a Content-Type of its choosin...

GHSA-3W93-6HMW-WHH4 Active Storage: Unsigned Content-Type in GCS direct uploads with cache_control

Impact When a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URLs with V4, and the V4 signature covers only the Cache-Control and Host headers. A direct-upload client can therefore send a Content-Type of its choosin...

mysql: mysql: Server takeover via Group Replication GCS

A flaw was found in MySQL's Group Replication Group Communication System GCS. An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Successful exploitation allows the attacker to take over the MySQ...

mysql: mysql: Denial of Service via Group Replication GCS

A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

mysql: mysql: Denial of Service via Group Replication GCS

A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

mysql: mysql: Server takeover via Group Replication GCS

A flaw was found in MySQL's Group Replication Group Communication System GCS. An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Successful exploitation allows the attacker to take over the MySQ...

CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

UBUNTU-CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

Linux Distros Unpatched Vulnerability : CVE-2026-126084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, wh...

CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

DEBIAN-CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

CVE-2026-126084 Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_control

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

CVE-2026-126084

Active Storage is vulnerable to an unsigned Content-Type issue in GCS service direct uploads when the cache_control option is enabled. Prior to versions 8.1.4.1 and 8.0.5.2 , the ActiveStorage::Service::GCSService#url_for_direct_upload method signs URLs with V4, covering only the Cache-Control an...

CVE-2026-126084 Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_control

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

CVE-2026-126084

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...

CVE-2026-126084: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...