12845 matches found
PT-2026-23479
Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect targets. An authenticated user who could control outbound request URLs e.g., webhook endpoints, image URLs could bypass...
CVE-2026-26377
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function...
Twenty CRM 代码问题漏洞
Twenty CRM is an open-source customer relationship management system developed by Twenty. Versions of Twenty CRM prior to version 1.18 contained code vulnerabilities. These vulnerabilities stemmed from an SSRF protection mechanism that did not validate redirect targets, allowing authenticated use...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005713)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005713 advisory. In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive value...
CVE-2026-26949
Dell Device Management Agent DDMA, versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-26949
Dell Device Management Agent DDMA, versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-22285
Dell Device Management Agent DDMA, versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access...
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1
Google said it identified a "new and powerful" exploit kit dubbed Coruna aka CryptoWaters targeting Apple iPhone models running iOS versions between 13.0 and 17.2.1. The exploit kit featured five full iOS exploit chains and a total of 23 exploits, Google Threat Intelligence Group GTIG said. It's...
CVE-2026-29120
creationtimestamp| type| source ---|---|--- 2026-03-04 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116170085409421373 2026-03-04 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg7waokems2w 2026-03-04 09:53:45+00:00| seen|...
MINI-PHF6-V22H-HRJH
Bulletin has no description...
SUSE CVE-2026-24834
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005616)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005616 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in sndac97devregister If deviceregister fails in...
Unity Linux 20.1070e Security Update: usbmuxd (UTSA-2026-005433)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005433 advisory. A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005496)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005496 advisory. In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in atmtcpcsend. syzbot reported the splat below. 0 vccsendms...
CVE-2026-1713
IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD...
CVE-2026-27446
creationtimestamp| type| source ---|---|--- 2026-03-03 17:42:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mg6cxstx3l2b 2026-03-04 09:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7zitr3hx2u 2026-03-04 16:58:14+00:00| seen|...
CVE-2026-3136
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...
K000160212: Binutils vulnerability CVE-2025-66865
Security Advisory Description An issue was discovered in function dprintcompinner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file. CVE-2025-66865 Impact There is no impact; F5 products are not affected by this vulnerability. Security Adviso...
CVE-2026-28422
creationtimestamp| type| source ---|---|--- 2026-03-03 15:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mg63tdu3sd26 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
