72204 matches found
CVE-2026-5487
creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...
CVE-2026-6336
creationtimestamp| type| source ---|---|--- 2026-07-29 21:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrst3p5lsr2e 2026-07-30 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
CVE-2026-67430
creationtimestamp| type| source ---|---|--- 2026-07-29 20:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o 2026-07-30 16:35:25+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh 2026-07-31...
CVE-2026-4672
creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
crun: crun: Privilege escalation due to incorrect parsing of the `--user` option
A flaw was found in crun, an open-source OCI Container Runtime. A local user can exploit this vulnerability due to incorrect parsing of the --user option when using crun exec. The value 1 is misinterpreted as root privileges User ID 0 and Group ID 0 instead of the intended User ID 1 and Group ID ...
CVE-2026-67201
creationtimestamp| type| source ---|---|--- 2026-07-29 20:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspoy6qkg2j...
CVE-2026-67436 Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...
MINI-WJFP-RV4R-J57J
Bulletin has no description...
MINI-XHFQ-HFV7-9G99
Bulletin has no description...
MINI-2QP3-C9JM-R5JC
Bulletin has no description...
MINI-MW8M-RV98-FJ9R
Bulletin has no description...
MINI-M7PF-PVFF-J9RH
Bulletin has no description...
MINI-MF23-6F4P-M9WG
Bulletin has no description...
MINI-X39R-6PMJ-V485
Bulletin has no description...
MINI-8PHH-7JJ8-H464
Bulletin has no description...
MINI-CJJ5-5F5C-RPHH
Bulletin has no description...
MINI-9W9F-HPXV-5PCF
Bulletin has no description...
CVE-2026-13346
creationtimestamp| type| source ---|---|--- 2026-07-29 19:33:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrso5c35vn24...
CVE-2026-65100
Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the peer decoder and corrupts subsequent header blocks on the connection. This issue affects Apache Traffic Server: from...
CVE-2026-58152
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...