72915 matches found
CVE-2026-20310
creationtimestamp| type| source ---|---|--- 2026-08-05 17:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o 2026-08-05 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo 2026-08-06 08:01:07+00:00| seen|...
GHSA-V3J7-R9GQ-3GJW
creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
CVE-2026-48912
creationtimestamp| type| source ---|---|--- 2026-08-05 15:31:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/igyfohm5byanp...
CVE-2026-48834
creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...
GHSA-3R7G-Q6CG-Q2VX
creationtimestamp| type| source ---|---|--- 2026-08-05 14:31:53+00:00| seen| https://gist.github.com/alon710/33c3bff7f99aec7fdcddc66966d519a0...
CVE-2026-67623
creationtimestamp| type| source ---|---|--- 2026-08-05 14:15:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jze72nb5aends...
CVE-2026-17613 CVE-2026-17613
Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full data exfiltration and data poisoning...
MINI-7P39-6M5M-87MV
Bulletin has no description...
MINI-2PFW-V7WP-WXWG
Bulletin has no description...
MINI-FHHF-2C7R-99JM
Bulletin has no description...
MINI-83GP-X62X-R329
Bulletin has no description...
MINI-MW36-WG87-QP73
Bulletin has no description...
MINI-Q6MW-VG6J-752W
Bulletin has no description...
MINI-9W2C-228R-887G
Bulletin has no description...
MINI-C5CG-CX46-QFG3
Bulletin has no description...
MINI-8946-2PXP-4753
Bulletin has no description...