72285 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-14801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file...
RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.7 (RHSA-2026:36342)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36342 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Ha...
Important: haproxy
Issue Overview: HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table...
CVE-2026-35361
creationtimestamp| type| source ---|---|--- 2026-07-06 23:11:39+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36 2026-07-07 00:00:03+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36...
GHSA-5493-9M76-2QRR
creationtimestamp| type| source ---|---|--- 2026-07-06 21:31:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpz22a66p72b...
GHSA-5WG6-JMQ2-53PW Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing
Summary Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the workspace was resolved by ID without confirming the URL's username matched the real owner, while the CORS middleware trusted the...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the CORS origin validation process. An attacker can gain unauthorized access to sensitive data by crafting a subdomain that encodes their own workspace UUID and a victim's username, then tricking an...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the CORS origin validation process. An attacker can gain unauthorized access to sensitive data by crafting a subdomain that encodes their own workspace UUID and a victim's username, then tricking an...
Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID
Summary UpsertWorkspaceApp overwrites an existing app's agentid on a primary-key conflict and insertAgentApp accepts the app ID from the provisioner's CompleteJob payload without verifying it belongs to the workspace being built. CompleteJob runs under dbauthz.AsProvisionerd so the authorization...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
GHSA-X76W-8C62-48MG
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:52+00:00| seen| https://gist.github.com/alon710/b825af035610849f3142d75d4e2989fc...
CVE-2026-55379
creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...
EUVD-2026-25018
id: groups= computed from real GID instead of effective GID...
GHSA-47C7-QRM7-MQW7 id: groups= computed from real GID instead of effective GID
The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of their effective GID to compute the group list, leading to potentially divergent output compared to GNU coreutils. Because many scripts and automated processes...
CVE-2026-57627
creationtimestamp| type| source ---|---|--- 2026-07-06 20:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpyvr5jl3j2n...
CVE-2026-55646
creationtimestamp| type| source ---|---|--- 2026-07-06 19:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuqutnll24 2026-07-09 15:03:14+00:00| seen| https://gist.github.com/Correctover/dcf89533dd8acf055791178f2130e704 2026-07-09 15:09:36+00:00| seen|...