13218 matches found
CVE-2026-81827
creationtimestamp| type| source ---|---|--- 2026-08-27 18:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2aycrsxvjyqle...
CVE-2026-81700
creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyh2uwf2b 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:00:58+00:00| seen|...
CVE-2026-81685
creationtimestamp| type| source ---|---|--- 2026-08-27 18:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gx25kt32c 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 08:40:08+00:00| seen|...
PYSEC-2026-3776
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
CVE-2026-81698
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
PYSEC-2026-3775
opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...
PYSEC-2026-3775
opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...
CVE-2026-26897
An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...
CVE-2026-78276
creationtimestamp| type| source ---|---|--- 2026-08-27 17:11:11+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu3dq2yuc62a 2026-08-27 17:11:13+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117168581500496652...
SUSE CVE-2026-74584
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero pages without GFPZERO, so the page contains stale kernel data from...
CVE-2026-71187
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqeqavt23 2026-08-29 13:12:09+00:00| seen|...
CVE-2026-73809
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...
CVE-2026-78037
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 2026-08-28 01:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3vzeug2g3jhib 2026-08-28 02:00:47+00:00| seen|...
CVE-2026-50787
creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ 2026-08-28 00:00:35+00:00| published-proof-of-concept| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ...
MINI-5HW9-MVV3-XV65
Bulletin has no description...
CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
EUVD-2026-67054
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
CVE-2026-81698
openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block . The root cause is that untrusted metadata fields (such as pepper_name) are interpolated without quoting, allowing an attacker to craft metadata values containing shell com...
CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...