12841 matches found
Authentication Bypass
litellm is vulnerable to Authentication Bypass. The vulnerability is due to weak cache key generation using only the first 20 characters of JWT tokens, which allows an attacker to craft a token with a matching prefix and gain unauthorized access by inheriting another user’s identity...
CVE-2026-3571
creationtimestamp| type| source ---|---|--- 2026-04-04 04:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3minejyuzrp25 2026-04-10 10:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj54ixzout2r...
CVE-2026-33175
creationtimestamp| type| source ---|---|--- 2026-04-03 23:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimt7hbnhq2o 2026-04-03 23:21:37+00:00| published-proof-of-concept| Telegram/CEl2HN4MrzqJMXyxgw87k5eg4RsD4Gdp10Ib2zQOK7Dk 2026-04-04 03:02:44+00:00| seen|...
CVE-2026-31400
creationtimestamp| type| source ---|---|--- 2026-04-03 16:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4togtpk2j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen...
JLSEC-2026-54
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...
Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption
Impact In applications built with the Auth0 PHP SDK, cookies are encrypted with insufficient entropy, which may result in threat actors brute-forcing the encryption key and forging session cookies. Am I Affected? You are affected if you meet the following preconditions: - Applications using...
RHEL 9 : libxslt (RHSA-2026:6499)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6499 advisory. libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlyin...
Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8141-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8141-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these...
SUSE CVE-2026-27489
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0...
CVE-2026-34606 Stored XSS in Frappe LMS
Frappe Learning Management System LMS is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to stored XSS. This issue has been patched in version 2.48.0...
CVE-2026-34606 Stored XSS in Frappe LMS
Frappe Learning Management System LMS is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to stored XSS. This issue has been patched in version 2.48.0...
EUVD-2026-18462
Frappe Learning Management System LMS is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to stored XSS. This issue has been patched in version 2.48.0...
CVE-2026-35002
creationtimestamp| type| source ---|---|--- 2026-04-02 17:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijpm4axuq2j 2026-04-02 17:38:06+00:00| published-proof-of-concept| Telegram/MQ6ai6F8nIsMgggTBJXuPSpPwamg57gds1UAnW3xco8kE...
CVE-2026-34230
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a respon...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update...
CVE-2026-35038
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0, there is an arbitrary prototype read vulnerability via from field bypass. This vulnerability allows a low-privileged authenticated user to bypass prototype boundary filtering to extract internal...
CVE-2026-33951 signalk-server: Unauthenticated Source Priorities Manipulation
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.1, the SignalK Server exposes an unauthenticated HTTP endpoint that allows remote attackers to modify navigation data source priorities. This endpoint, accessible via PUT...
CVE-2026-4636
creationtimestamp| type| source ---|---|--- 2026-04-02 14:40:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijgqyyqyh2q 2026-04-02 15:20:57+00:00| seen| Telegram/1FZmwvj65iY9NiI7VGWCBujhZKTilfhPPvdqi0EqVANQnis 2026-04-02 15:21:07+00:00| published-proof-of-concept|...
EUVD-2026-18183
A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handlemdnsrecord of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the argument buf results in stack-based buffer overflow. Remote exploitation of the attack is possible. A...
CVE-2026-5246
A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mgtlsverifycertsignature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. Attacks of this nature...