13470 matches found
CVE-2026-45088
Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the custom-payload-file field in model.Options is JSON-tagged and deserialized directly from the attacker's request body, then propagated unchanged through...
CVE-2026-44345
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/internal/container/frontend/dockerfile/templates/basev2.j2 interpolates docker.baseimage raw with no escaping, newline filtering, or validation. A malicious...
CVE-2026-44972 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject...
CVE-2026-39828 vulnerabilities
Vulnerabilities for packages: skaffold, gitlab-kas, opentelemetry-collector, cert-manager, k3s, kubernetes, nerdctl, docker-machine-driver-harvester, helm, cilium-cli, flux-image-automation-controller, kubernetes-dashboard, istio, loki, rancher, kubescape, prometheus, cilium, mattermost, chisel,...
CVE-2026-46598 vulnerabilities
Vulnerabilities for packages: gitlab-kas, opentelemetry-collector, cert-manager, k3s, kubernetes, nerdctl, helm, cilium-cli, kubernetes-dashboard, istio, loki, rancher, prometheus, podman, cilium, mattermost, buildah, cloud-provider-aws, external-secrets-operator, knative-serving, kots, opentofu,...
CVE-2026-39834 vulnerabilities
Vulnerabilities for packages: act, fulcio, step, cert-manager, k3s, crossplane-provider-aws-cloudformation, gitlab-runner, terraform-provider-azurerm, nfpm, steampipe, neuvector-sigstore-interface, caddy, flux-kustomize-controller, crossplane-provider-aws-kinesis, glab,...
WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Line Agency versions = 1.3.1...
CVE-2026-46595 vulnerabilities
Vulnerabilities for packages: omnictl-multiarch, etcd, kubevela-fips, seaweedfs-rocksdb-fips, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, trivy-operator-fips, nemo, k9s, helm, frankenphp-8.2, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, trivy-operator, zot, drone,...
CVE-2026-39832 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, omnictl-multiarch, apko, dagger, etcd, gptscript, kubevela-fips, argo-workflows-fips, fscrypt, packer, gitlab-rails-ce-fips, trivy-operator-fips, nemo, k9s, helm, frankenphp-8.2, go-discover, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips,...
USN-8321-1: Papers vulnerability
It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a specially crafted PDF file, an attacker could use this issue to manipulate command lines and possibly execute arbitrary code...
CVE-2026-45842
A flaw was found in the Linux kernel's SLIP Serial Line Internet Protocol and PPP Point-to-Point Protocol components. An unprivileged local user can exploit this vulnerability by manipulating the PPPIOCSMAXCID ioctl to configure the SLIP Compressed Header SLHC state incorrectly. This...
CVE-2026-45843
A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP implementation. The slhcuncompress function, which handles VJ-compressed TCP headers, fails to perform proper bounds checks during packet processing. A remote attacker could exploit this by sending a specially crafted...
[SECURITY] Fedora 43 Update: rust-sequoia-sq-1.3.1-11.fc43
Command-line frontends for Sequoia...
[SECURITY] Fedora 43 Update: curl-8.15.0-7.fc43
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
[SECURITY] Fedora 42 Update: rust-sequoia-sq-1.3.1-11.fc42
Command-line frontends for Sequoia...
MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞
MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...
MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞
MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...
MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞
MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...
MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞
MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...
MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞
MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...