CVE-2025-48578

In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITEEXTERNALSTORAGE permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-48636

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48619

In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0035

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2026-23114

Name of the Vulnerable Software and Affected Versions Drupal OpenID Connect / OAuth client versions prior to 1.5.0 Description A flaw exists in the OpenID Connect / OAuth client module that could allow for authentication bypass. Specifically, if a user successfully authenticates with their Identi...

OpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. The module doesn't sufficiently validate certain fields coming fro...

Insufficient Granularity of Access Control

Overview Affected versions of this package are vulnerable to Insufficient Granularity of Access Control in the cloud providers API. An attacker can gain unauthorized access to cloud provider APIs and perform actions with attached cloud credentials by sending crafted requests through the proxy API...

Insufficient Granularity of Access Control

Overview github.com/rancher/rancher/pkg/controllers/user/rbac is an open source project that provides a container management platform built for organizations that deploy containers in production. Rancher makes it easy to run Kubernetes everywhere, meet IT requirements, and empower DevOps teams...

Rancher cloud credentials can be used through proxy API by users without access

A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...

CVE-2026-3432

On SimStudio version below to 0.5.74, the /api/auth/oauth/token endpoint contains a code path that bypasses all authorization checks when provided with credentialAccountUserId and providerId parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: sops, chezmoi, terraform-provider-aws, crossplane-provider-aws-firehose, traefik, pulumi-language-java, opa-envoy, kubo, caddy, crossplane-provider-aws-lambda, cluster-api-azure-controller, kube-vip, crossplane-provider-aws-route53,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: sops, chezmoi, terraform-provider-aws, crossplane-provider-aws-firehose, traefik, pulumi-language-java, opa-envoy, kubo, caddy, crossplane-provider-aws-lambda, cluster-api-azure-controller, kube-vip, crossplane-provider-aws-route53,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: cloudbeat, opentelemetry-collector-contrib-fips, crossplane-provider-terraform, step-issuer-fips, crossplane-provider-aws-rolesanywhere-fips, peerdb-flow, src, emissary, terraform-provider-aws-fips, cluster-api-azure-controller, crossplane-provider-aws-s3-fips,...

Malicious code in polymarket-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c186d214eb963243e619bc60d87eee8691ea9a502e437b5d4361f18e05893 The package polymarket-provider was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview polymarket-provider is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1205 Malicious code in polymarket-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c186d214eb963243e619bc60d87eee8691ea9a502e437b5d4361f18e05893 The package polymarket-provider was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-9270

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...

PT-2026-22708

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...

CVE-2026-0035

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...