72233 matches found
MINI-X89H-3MCG-3362
Bulletin has no description...
MINI-549R-59QR-3WJR
Bulletin has no description...
MINI-38VW-H3FJ-567Q
Bulletin has no description...
GHSA-WM3W-8RRP-J577
creationtimestamp| type| source ---|---|--- 2026-07-21 01:31:18+00:00| seen| https://gist.github.com/alon710/84075b1c42ed77e39cb61a3601f10615...
rabbitmq-server: RabbitMQ: Authorization bypass via regular expression injection in MQTT client ID
A flaw was found in RabbitMQ. An authenticated MQTT Message Queuing Telemetry Transport user can bypass topic-level authorization by injecting regular expression operators. This occurs because the client ID, provided by the user in the MQTT CONNECT packet, is inserted into authorization regex...
PT-2026-63259
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...
CVE-2026-64205
In the Linux kernel, the following vulnerability has been resolved: i...
PT-2026-63287
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Issue and comment attachment update paths allow the use of attachment UUIDs without verifying if the attachment belongs to the target repository. An authenticated attacker can re-link a victim'...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2737)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...
CVE-2026-44230
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...
CVE-2026-47255
creationtimestamp| type| source ---|---|--- 2026-07-20 23:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4flmkaao2l 2026-07-20 23:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4ilpwk632s...
CVE-2026-57145
creationtimestamp| type| source ---|---|--- 2026-07-20 22:35:46+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47 2026-07-23 17:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u...
CVE-2026-44585
creationtimestamp| type| source ---|---|--- 2026-07-20 22:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4duk7rjn2g...
CVE-2026-47134
creationtimestamp| type| source ---|---|--- 2026-07-20 22:13:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cvvfytm2j...
CVE-2026-44507
creationtimestamp| type| source ---|---|--- 2026-07-20 22:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cnbk5rs2x...
CVE-2026-44583
creationtimestamp| type| source ---|---|--- 2026-07-20 21:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bzhro4d2i...
EUVD-2026-46121
AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...
CVE-2026-55639
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...
CVE-2026-55238
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated...