72049 matches found
CVE-2026-48834
creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...
MINI-7P39-6M5M-87MV
Bulletin has no description...
MINI-2PFW-V7WP-WXWG
Bulletin has no description...
MINI-MW36-WG87-QP73
Bulletin has no description...
MINI-83GP-X62X-R329
Bulletin has no description...
MINI-2W8X-V6RM-FJV5
Bulletin has no description...
MINI-4XF7-5CPV-MF2V
Bulletin has no description...
MINI-8VXJ-H938-55C3
Bulletin has no description...
MINI-6MV7-7G54-37J9
Bulletin has no description...
MINI-FQ24-QFJH-6WV4
Bulletin has no description...
CVE-2026-8384
A flaw was found in Eclipse Jetty. An attacker could craft a specially formed HTTP Uniform Resource Identifier URI that, when processed by Jetty, results in an unresolved path. While Jetty itself is not directly affected, web applications relying on Jetty to provide resolved paths may be confused...
CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher
A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...
CVE-2026-15573
A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...
CVE-2026-16443
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443
CVE-2026-16443 affects Red Hat build of Keycloak: the keycloak-services SAML broker metadata import feature incorrectly disables signature validation for SAML responses when provider metadata lacks certain key usage attributes, even if a signing certificate is supplied. This enables an unauthenti...
Malicious code in @kite-js-tools/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc1e1caf8550f3daa91e586dd7b4eab7f5ec8f62acc12dce63d9d60c293e7c9 package.json declares preinstall and postinstall lifecycle scripts that fire automatically on npm install. The preinstall hook performs an HTTPS GET ...
EUVD-2026-53370
Uptime Kuma's Matomo analytics integration server/analytics/matomo-analytics.js injects the admin-configurable Matomo siteId value as a bare, unquoted JavaScript expression inside a block rendered on every public status page: paq.push'setSiteId', $escapedSiteIdHTMLAttribute;. The escaping pipelin...
CVE-2026-71285
Uptime Kuma’s Matomo analytics integration (server/analytics/matomo-analytics.js) is affected. The admin-configurable Matomo siteId is injected as a bare, unquoted JavaScript expression inside a [removed] block on every public status page: _paq.push(['setSiteId', ${escapedSiteIdHTMLAttribute}]);....
CVE-2026-71256
nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...