4735 matches found
GHSA-4XC4-762W-M6CG
creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:00+00:00| seen| https://gist.github.com/alon710/af7f1621d94bc4520e512228571073ac 2026-01-24 21:26:09+00:00| seen| https://gist.github.com/alon710/d0d64a6b47dd3930f853faaddb139d32 2026-01-24 22:41:32+00:00| seen|...
GHSA-2GQC-6J2Q-83QP
creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:37+00:00| seen| https://gist.github.com/alon710/c5951996d1cad3ddfdf0314481d66b05 2026-01-24 22:32:37+00:00| seen| https://gist.github.com/alon710/122a4775211986e69d62ce1028832f7e 2026-01-24 22:32:40+00:00| seen|...
GHSA-5QW5-WF2Q-F538
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:55+00:00| seen| https://gist.github.com/alon710/6406010f2fb61f504b578e59fec018fa 2026-01-24 22:28:06+00:00| seen| https://gist.github.com/alon710/d0c1178fbf8fa30b7662bbfd575162bb 2026-01-24 22:28:08+00:00| seen|...
January Linux Patch Wednesday
JanuaryLinux Patch Wednesday. In January, Linux vendors started fixing 918 vulnerabilities, one and a half times more than in December. Of these, 616 are in the Linux Kernel. Three show signs of exploitation in the wild: 🔻 AuthBypass - GNU Inetutils telnetd CVE-2026-24061 🔻 RCE - Safari...
About Information Disclosure – Desktop Window Manager (CVE-2026-20805) vulnerability
About Information Disclosure - Desktop Window Manager CVE-2026-20805 vulnerability. Desktop Window Manager is a compositing window manager that has been part of Windows since Windows Vista. Exploitation of the vulnerability, which was addressed in the January Microsoft Patch Tuesday, allows a loc...
CVE-2026-24403
creationtimestamp| type| source ---|---|--- 2026-01-24 04:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5disa7ef2c...
CVE-2026-22583
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement CloudPagesUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...
CVE-2026-22582
Salesforce Marketing Cloud Engagement versions prior to January 21st, 2026 are vulnerable to an Argument Injection vulnerability within the MicrositeUrl module. This issue stems from the improper neutralization of argument delimiters in a command, which allows for Web Services Protocol Manipulati...
CVE-2026-22586
The CVE-2026-22586 entry concerns Salesforce Marketing Cloud Engagement, specifically modules such as CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage. The root cause is a hard-coded cryptographic key that enables Web Services Protocol Manipu...
CVE-2026-22585
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...
CVE-2026-22585
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...
CVE-2025-66719
creationtimestamp| type| source ---|---|--- 2026-01-23 21:15:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md4mnhoodc23 2026-01-23 23:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4vgh5bjv23 2026-07-07 20:50:06+00:00| seen|...
GO-2026-4310 Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails in github.com/axllent/mailpit
Mailpit is vulnerable to Cross-Site WebSocket Hijacking CSWSH allowing unauthenticated access to emails in github.com/axllent/mailpit. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
Oracle Business Intelligence Enterprise Edition (OAS 7.6) (January 2026 CPU)
The version of Oracle Business Intelligence Enterprise Edition OAS 7.6.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...
Oracle Essbase Information Disclosure Vulnerability (January 2026 CPU)
The version of Oracle Essbase installed on the remote host is missing a security patch from the January 2026 Critical Patch Update CPU. It is, therefore, affected by: - yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor...
Oracle Business Intelligence Enterprise Edition (OAS 8.2) (January 2026 CPU)
The version of Oracle Business Intelligence Enterprise Edition OAS 8.2.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...
PT-2026-4636
CVE-2026-24337 - Apache HTTP Server Denial of Service CVE ID : CVE-2026-24337 Published : Jan. 23, 2026, 5:16 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Oracle VM VirtualBox (CVE-2026-21986) (January 2026 CPU)
The 7.1.14 and 7.2.4 versions of VM VirtualBox installed on the remote host are affected by a vulnerability as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14...
Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability
Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...
