57935 matches found
GHSA-XVG2-CGV6-6H7V
creationtimestamp| type| source ---|---|--- 2026-07-29 22:32:10+00:00| seen| https://gist.github.com/alon710/4f3175144e6d12e46b24b49c3b567546 2026-07-30 00:01:11+00:00| seen| https://gist.github.com/alon710/4f3175144e6d12e46b24b49c3b567546...
CVE-2025-69949
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...
CVE-2025-69943
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in getdoctor.php via the parameters doctor and specilizationid...
CVE-2025-67406
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
CVE-2026-67435
creationtimestamp| type| source ---|---|--- 2026-07-29 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstx5hkw522 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...
CVE-2026-67436
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...
CVE-2026-5487
DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...
CVE-2026-67436
CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...
MINI-6MRQ-CRM8-MPCH
Bulletin has no description...
CVE-2026-67431
MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind a session ID to a session owner, allowing an attacker with a stolen session ID to send tools/call requests that...
CVE-2026-64268
A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...
CVE-2026-54693
creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c 2026-07-29 18:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjxpyzb222...
CVE-2026-52791 fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
EUVD-2026-50403
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
Important: Red Hat Security Advisory: kpatch-patch security update
An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
CVE-2026-15228 Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision
Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace...
GHSA-M8RV-5G2X-5CG5
creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:08+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mleb52m 2026-08-04 11:32:23+00:00| seen| https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f...
CVE-2026-18220
creationtimestamp| type| source ---|---|--- 2026-07-29 15:00:04+00:00| seen| https://t.me/GithubRedTeam/95685 2026-07-29 15:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wssb5p2f 2026-07-30 00:00:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/95...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...