GHSA-3WP3-XXJ9-5JQQ

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...

GHSA-FP43-VJ7G-PG92 OmniFaces: Forged combined-resource IDs and related output/push boundaries

Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...

CVE-2026-66138

creationtimestamp| type| source ---|---|--- 2026-07-24 22:33:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgfv6yufv25...

GHSA-95CV-R8X4-VH75 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

Summary The /api/fs/batchrename handler validates and authorizes only the requested source directory. It rejects path separators in newname, but it does not validate srcname. The handler concatenates srcdir and attacker-controlled srcname, then passes the result to the filesystem rename layer,...

CVE-2026-66039

creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...

CVE-2026-66040

creationtimestamp| type| source ---|---|--- 2026-07-24 22:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge27kuf62d...

CVE-2021-22439

creationtimestamp| type| source ---|---|--- 2026-07-24 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrgcqctujh2c...

Information Exposure

Overview @budibase/types is a Budibase types Affected versions of this package are vulnerable to Information Exposure via the rest integration process. An attacker can obtain sensitive authentication credentials by supplying a crafted absolute URL as a query parameter, causing the system to forwa...

CVE-2026-62379

creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-07-31 13:41:33+00:00| seen|...

CVE-2026-62263

creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkotfvw2y 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-09-15 12:07:47+00:00| seen|...

AperiSolve v3.7.1

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on...

CVE-2026-64873

creationtimestamp| type| source ---|---|--- 2026-07-24 20:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg63us7or22...

CVE-2026-52439

creationtimestamp| type| source ---|---|--- 2026-07-24 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg63tlg4j2y...

CVE-2026-12877

creationtimestamp| type| source ---|---|--- 2026-07-24 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg5ycdv322u 2026-07-25 10:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhmbx6swj2g...

CVE-2026-66035

creationtimestamp| type| source ---|---|--- 2026-07-24 20:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fadoc62q 2026-07-26 06:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrjrrbwwoz22 2026-07-27 09:06:04+00:00| seen|...

CVE-2026-54342

creationtimestamp| type| source ---|---|--- 2026-07-24 20:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dmmkie22...

CVE-2026-48021

creationtimestamp| type| source ---|---|--- 2026-07-24 19:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y 2026-07-24 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a 2026-07-25 03:00:27+00:00| seen|...

NETworkManager v2026.7.24.0

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

EUVD-2026-48727

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...