CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-55379

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...

vuln-poc-research-skill

Vuln-Poc-Research Skill Chinese vuln-poc-research is a...

CVE-2026-4375

creationtimestamp| type| source ---|---|--- 2026-07-07 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116877520158002101 2026-07-07 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq23iqtn2r2u 2026-07-07 14:12:06+00:00| seen|...

CVE-2026-34037

creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpzpxpr5wr2h 2026-07-07 04:21:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqxmsj2d2u 2026-07-07 04:30:26+00:00| seen|...

CVE-2026-14604

A flaw was found in Open Asset Import Library Assimp. This vulnerability, a double free, exists within the PLY Model Handler component. A remote attacker could exploit this flaw by manipulating PLY model files, leading to a denial of service and making the application unavailable. Mitigation To...

PT-2026-75926

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dag id — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

PT-2026-56179

Name of the Vulnerable Software and Affected Versions apache-airflow versions prior to 3.3.0 Description An authorization bypass occurs when a user with permission to read a specific Dag can disclose the source code of other Dags located within the same source file. This issue affects deployments...

Data Import for Veeam Data Cloud for Salesforce

Purpose This article explains the Data Import feature in Veeam Data Cloud for Salesforce VDCSF: what it does, which sources it currently supports, and how to prepare data for importation. This article is a feature summary only. Full procedural documentation can be found in the VDCSF User Guide...

PT-2026-56272

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.650 Description Code injection is possible via a caller-influenced Profile attribute. When a string is assigned to this attribute, the software splits it into path, package, and arguments, then interpolates the package...

CVE-2026-35381

creationtimestamp| type| source ---|---|--- 2026-07-06 22:41:49+00:00| seen| https://gist.github.com/alon710/b10b20af35b7bf752b36e152bb72f112 2026-07-06 22:51:38+00:00| seen| https://gist.github.com/alon710/61c7500d7ede6fc47b0cecdd16d710a9 2026-07-07 00:00:03+00:00| seen|...

CVE-2026-14898

The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in content processed by Codex, such as a connected-tool result or another untrusted source, could induce the model to construct a remote image U...

CVE-2026-24014

creationtimestamp| type| source ---|---|--- 2026-07-06 19:23:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpysv577xg2h 2026-07-06 20:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywlvq6ic2e 2026-07-08 04:07:07+00:00| seen|...

CVE-2026-48614

creationtimestamp| type| source ---|---|--- 2026-07-06 18:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpypo6pjat2j 2026-07-06 21:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzse3xqg2q 2026-07-07 17:10:01+00:00| seen|...

CVE-2026-40139

creationtimestamp| type| source ---|---|--- 2026-07-06 17:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpymetigjj26 2026-07-06 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpymjzwroy2i 2026-07-06 17:48:42+00:00| seen|...

CVE-2026-52889

creationtimestamp| type| source ---|---|--- 2026-07-06 17:19:00+00:00| seen| https://bsky.app/profile/suriq.io/post/3mpylw6zxqa23 2026-07-06 17:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpymggmgx42r 2026-08-19 16:10:54+00:00| seen|...

CVE-2025-53830

creationtimestamp| type| source ---|---|--- 2026-07-06 16:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhjmgtvk2d 2026-07-06 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyity4fct2z...

CVE-2026-57638

creationtimestamp| type| source ---|---|--- 2026-07-06 12:15:11+00:00| seen| https://bsky.app/profile/potato.software/post/3mpy2wtxs6s2h 2026-07-06 12:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpy2wthmb22a...

CVE-2026-6900

creationtimestamp| type| source ---|---|--- 2026-07-06 12:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy24fiood2n 2026-07-06 12:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpy2kbbg4l2i...

CVE-2026-14809

creationtimestamp| type| source ---|---|--- 2026-07-06 09:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxqxvwyzn2j 2026-07-06 09:45:09+00:00| seen| https://www.twcert.org.tw/en/cp-139-11026-3df18-2.html...