GHSA-CWX4-F9X9-PQHH vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure, linux-qemu-melange...

GHSA-3J9Q-258H-4V38 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure, linux-qemu-melange...

GHSA-JMF6-3V74-7X28 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure, linux-qemu-melange...

GHSA-WWC5-7R8X-52GG vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure, linux-qemu-melange...

CVE-2026-53530

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:13+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4hgp-59h5-gvrj...

CVE-2026-53531

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:11+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4w5h-hx6r-28q7...

CVE-2026-53487

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:09+00:00| published-proof-of-concept| https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8...

CVE-2026-53553

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:05+00:00| published-proof-of-concept| https://github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw...

golang-github-openprinting-ipp-usb security update

0.9.27-6 - rebuilt to fix CVE-2026-27137, CVE-2026-25679 - fixed rebuild problem with redundant condition check in quirks.empty...

PT-2026-80686

BBOT's github workflows module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve .., so a crafted CODE REPOSITORY URL could traverse out of the intended folder. The write is bounded to two directory levels above the...

Git Hash Chain Malleability

This whitepaper demonstrates that signed Git commits are not uniquely bound to their commit hashes, even when they display a valid "Verified" badge on GitHub. The authors show that attackers can transform the signature encoding of an existing signed commit—without possessing the private signing...

📄 OpenCATS 0.9.7.4 Time-Based Blind SQL Injection

This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 Time-Based Blind SQL Injection Exploit Data...

Malicious Package

Overview github.com/kaleidora/dnsub-scanning-tool is a malicious package. This package contains malicious code and while hile this package might be attempting to impersonate a legitimate DNS/subdomain scanning tool, there is no connection between that valid project and this package, which conceal...

GO-2026-5918 Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder...

GO-2026-5924 Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder

Coder's session token leaked to arbitrary hosts via coder open app for external workspace apps in github.com/coder/coder...

GO-2026-5925 Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder

Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder...

GO-2026-5806 Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus

Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus...

GO-2026-5922 Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder...

GO-2026-5921 Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints in github.com/coder/coder

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints in github.com/coder/coder...

GO-2026-5570 Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value in github.com/free5gc/nrf

Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value in github.com/free5gc/nrf...