122422 matches found
GHSA-F7VP-7XGX-4W4R
creationtimestamp| type| source ---|---|--- 2026-08-04 02:31:57+00:00| seen| https://gist.github.com/alon710/4e720b413fb9ae4a89b2607de953bdbe...
CVE-2026-69245
creationtimestamp| type| source ---|---|--- 2026-08-04 02:31:55+00:00| seen| https://gist.github.com/alon710/4e720b413fb9ae4a89b2607de953bdbe...
CVE-2026-62354
creationtimestamp| type| source ---|---|--- 2026-08-04 01:52:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3ms7vng7zoz24...
CVE-2026-68981
creationtimestamp| type| source ---|---|--- 2026-08-04 01:52:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3ms7vng7zoz24 2026-08-06 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfvlqyojt2q...
CVE-2026-69246
creationtimestamp| type| source ---|---|--- 2026-08-04 01:31:43+00:00| seen| https://gist.github.com/alon710/aa0d8e0a2033bd155210db761c2f4b38 2026-08-04 15:11:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117037876063346800 2026-08-04 15:11:08+00:00| seen|...
CVE-2026-18686
creationtimestamp| type| source ---|---|--- 2026-08-04 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117034649197021910 2026-08-04 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x 2026-08-04 02:01:18+00:00| seen|...
Rocket.Chat v8.7.0-rc.4
The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...
CVE-2026-69247
creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...
GHSA-G6CJ-PR64-35W5
creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...
ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching
A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...
CVE-2026-69095
creationtimestamp| type| source ---|---|--- 2026-08-04 00:01:21+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3ms7phgudky2g...
Important: nginx
Issue Overview: A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
PT-2026-67903
Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticated non-admin who could use a shared tool could also read its source, including any user on the instance when a tool was shared publicly. Source is meant to be a writer-only tier: the...
PT-2026-75909
Summary An Insecure Direct Object Reference IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint. This flaw allows an authenticated attacker to bypass authorization checks and retrieve sensitive payment and profile information of other customers by manipulati...
CVE-2026-70491: Exposure of Sensitive Information to an Unauthorized Actor
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-18772: Improperly Controlled Sequential Memory Allocation
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion...
PT-2026-67859
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.0 Description Authenticated non-admin users with read-only access can obtain the full Python source code of server-side tools shared with them. This occurs because the response models permitted extra fields,...
Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework
While retrieval-augmented generation systems partially address the hallucination issues in large language models, it also introduces new vulnerabilities to knowledge corruption attacks. Adversaries exploit these vulnerabilities by poisoning documents provided by RAG system to manipulate LLM...
PT-2026-67687
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper input validation allows the processing of oversized serialized data payloads. Recommendations At the moment, there is no information about a newer version that...
