CVE-2026-5459

creationtimestamp| type| source ---|---|--- 2026-07-08 15:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq5fygmvsh2d...

CVE-2026-56086

creationtimestamp| type| source ---|---|--- 2026-07-08 14:44:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3mq5e6qdzn72d 2026-07-09 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq7f6or2nd2m...

CVE-2026-55874

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...

CVE-2026-55874

SeaweedFS's S3 API gateway is affected prior to version 4.34 by a path traversal issue in the X-Amz-Copy-Source header (dot-dot segments) that can enable an authenticated user scoped to one bucket to read objects from other buckets via server-side copy. The issue is documented across CVE-2026-558...

CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...

CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...

CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...

CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

GHSA-HWMJ-QG4V-CVG9

creationtimestamp| type| source ---|---|--- 2026-07-08 14:41:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e2piu2p26...

CVE-2019-10663

creationtimestamp| type| source ---|---|--- 2026-07-08 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5dskju6a2g...

CVE-2026-6459

creationtimestamp| type| source ---|---|--- 2026-07-08 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq5cmzz3zi26...

CVE-2024-00001

creationtimestamp| type| source ---|---|--- 2026-07-08 14:03:59+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq5bxdedta2g 2026-07-10 04:27:21+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqbco2xkwm2p 2026-07-28 15:34:40+00:00| seen|...

kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT Source Network Address Translation module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP Address Resolution...

CVE-2026-15035

Bentoml OpenLLM 0.6.30 is affected by a command-injection in async_run_command (src/openllm/common.py, Model Repository Directory Name Handler). The vulnerability stems from manipulation of the cmd argument, enabling local exploitation. Public exploit details exist, and attack requires local acce...

CVE-2026-56293

Capgo before 12.128.2 contains an authorization flaw in transferapp that fails to update deployhistory.ownerorg when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause...

EUVD-2026-42254

Capgo before 12.128.2 contains an authorization flaw in transferapp that fails to update deployhistory.ownerorg when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause...

MINI-5686-GJR7-PQG2

Bulletin has no description...

CVE-2026-6818

creationtimestamp| type| source ---|---|--- 2026-07-08 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq57bpuwyo2p...

CVE-2026-8307

creationtimestamp| type| source ---|---|--- 2026-07-08 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq56wwdaak2d 2026-07-08 13:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq57vsdkv525...