144187 matches found
Improper Handling of Case Sensitivity
Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the handling of HTTP headers in authentication middlewares. An attacker can impersonate users or escalate privileges by injecting underscore-variant headers that bypass canonical header strippin...
CVE-2026-54709
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:29+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-fhf9-m53m-863g...
CVE-2026-53759
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:27+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-r35r-fpx2-jgr4...
CVE-2026-54771
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:22+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-gjgq-w2m6-wr5q 2026-07-10 01:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4od5hu2i 2026-07-10...
CVE-2026-53624
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:20+00:00| published-proof-of-concept| https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c...
CVE-2026-54637
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:14+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-chwm-m7g7-685g...
CVE-2026-55426
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:11+00:00| published-proof-of-concept| https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-798h-hpph-m24j...
CVE-2026-55501
creationtimestamp| type| source ---|---|--- 2026-07-06 22:35:05+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-7cfm-pqrj-xgq7 2026-07-10 16:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqckkdhmae2e 2026-07-10 22:20:14+00:00|...
CVE-2026-43928
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount mcgross to the client's balance without validating it against the invoice total. Combined with a $0.05...
GHSA-287W-MXQ6-X2CP
creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...
CVE-2026-55514
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is...
Unintended Proxy or Intermediary ('Confused Deputy')
Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' in the httpapi.RequestHost process. An attacker can gain unauthorized access to sensitive data by sending requests with a crafted X-Forwarded-Host header, which is trusted over the real...
GHSA-X76W-8C62-48MG
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:52+00:00| seen| https://gist.github.com/alon710/b825af035610849f3142d75d4e2989fc...
GHSA-H6Q6-9HQW-RWFV vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard...
GHSA-CRH6-FP67-6883 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard...
CVE-2026-55380
creationtimestamp| type| source ---|---|--- 2026-07-06 20:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyv6ureav2v 2026-07-20 22:37:39+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm...
coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35342 via uu_mktemp (>=0.0.14, <=0.0.16)
uumktemp CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35342 Source advisory: OSV:GHSA-2W8R-9XJ7-69J5...
CVE-2026-41516
OP-TEE (Trusted Execution Environment for Arm Cortex-A TrustZone) contains a vulnerability in the Hisilicon HPRE PKCS#1 v1.5 RSA decryption path. From version 4.5.0 up to, but not including, 4.11.0, the RSA PKCS#1 v1.5 decryption implementation uses non-constant-time memcmp() for label hash verif...
GHSA-PJMC-GX33-GC76
creationtimestamp| type| source ---|---|--- 2026-07-06 19:19:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysnxoqkx22 2026-07-07 00:01:32+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcfyt62f2d...