72025 matches found
MINI-7H9Q-VCWW-5P2M
Bulletin has no description...
MINI-26V7-3QPJ-MMRQ
Bulletin has no description...
MINI-3XHV-C53F-V2J3
Bulletin has no description...
MINI-6X65-G7GV-F759
Bulletin has no description...
MINI-CPG9-M2W9-F7F5
Bulletin has no description...
MINI-7FR9-C98P-7J33
Bulletin has no description...
CVE-2026-19284
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
EUVD-2026-54781
A weakness has been identified in andreahaku llmmemorymcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llmmemorymcp. Executing a manipulation of the argument hash can lead to command injection...
CVE-2026-71556
creationtimestamp| type| source ---|---|--- 2026-08-08 11:33:31+00:00| seen| https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: kots, argocd-image-updater, k9s, xeol, pulumi-language-dotnet, kubescape, kubevela, kyverno, src-fingerprint, argo-workflows, teleport, boring-registry, dagger, witness, kaniko, skaffold, crossplane, external-secrets-operator, act, pulumi-language-java, steampipe,...
CGA-5RCR-HJ5P-4FC7
Bulletin has no description...
CVE-2026-19270
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
CVE-2026-14231
creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...
CVE-2026-47127
Summary: Ghostfolio prior to 3.4.0 allowed any authenticated user to self-grant a 1-year Premium subscription via the Stripe checkout success callback at GET /api/v1/subscription/stripe/callback?checkoutSessionId=, which unconditionally assigns the session’s client_reference_id without checking s...
Exploit for CVE-2026-64638
No d...
ECHO-6324-D2F6-0441
Bulletin has no description...
CGA-F6HW-V7QV-59C4
Bulletin has no description...
CVE-2026-15733
creationtimestamp| type| source ---|---|--- 2026-08-07 19:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjat4z4mf2d 2026-08-09 04:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpvwtkoa2q...