41757 matches found
CLSA-2026-1784683086 TuxCare security update for shell-quote (2 CVEs)
TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.7.3-tuxcare.1...
CLSA-2026-1783558964 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.2...
CLSA-2026-1773879463 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...
CLSA-2026-1773274563 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.4.3-tuxcare.1...
CVE-2026-14175
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the...
CVE-2026-14175
CVE-2026-14175 affects Bilin Software’s HUMANIST Digital Human Resources 26.0 all the way up to 26.0.x before 26.1. The issue is an unrestricted file upload vulnerability that can let an attacker upload a dangerous file (a web shell) to the web server, enabling potential remote control of the ser...
CVE-2026-14175 Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
EUVD-2026-52648
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-14175
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-14175 Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
MAL-2026-11516 Malicious code in coldcard-helpers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aea0829143169ee7227c8974c3b42125e95b89387a00ccb2b37d1d7344b041a The package presents itself as a helper for the Coldcard hardware wallet, but its actual behavior is credential and wallet theft. setup.py detects...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11120 – Command Injection via Git URL in CI/CD...
Improper Neutralization of Input Used for LLM Prompting
Overview strands-agents-tools is an A collection of specialized tools for Strands Agents Affected versions of this package are vulnerable to Improper Neutralization of Input Used for LLM Prompting via the shell tool. An attacker can execute arbitrary operating system commands by crafting a prompt...
PT-2026-75599
TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.7.3-tuxcare.1...
CVE-2025-29296
H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multiple command injection vulnerabilities in the /api/esps request handler. The...
Joern 4.0.595
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
PT-2026-75336
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.2...
PT-2026-67909
Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that get verified user enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...