123268 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-67338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata...
CVE-2026-67298
creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n...
Exploit for CVE-2025-10897
CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...
CVE-2026-67305
creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwrfkiw2h 2026-08-05 02:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msciabr6c623...
CVE-2026-67289
creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140 2026-08-05 02:24:03+00:00| seen|...
CVE-2026-67327
creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22emobp22t 2026-08-01 22:18:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iruraca22 2026-08-01 22:19:08+00:00| seen|...
CVE-2026-17580
creationtimestamp| type| source ---|---|--- 2026-08-01 17:53:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzymh7nm25 2026-08-01 18:45:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24u4wgky2x 2026-08-01 18:45:08+00:00| seen|...
CVE-2026-16090
creationtimestamp| type| source ---|---|--- 2026-08-01 17:37:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz32c2n52x 2026-08-01 18:58:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms25lk44th2p...
CVE-2026-2916
creationtimestamp| type| source ---|---|--- 2026-08-01 17:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxns7zhq24...
GHSA-M4F3-G4CQ-HQRX Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...
Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...
GHSA-8VR5-263F-X5R3
creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d...
Improper Input Validation
free5GC is vulnerable to Improper Input Validation. The vulnerability is due to the AUSF failing to validate the supiOrSuci field in UE authentication requests before forwarding it in an unescaped URL path, which allows an unauthenticated attacker to send crafted input containing null bytes or...
CVE-2026-18536
creationtimestamp| type| source ---|---|--- 2026-08-01 14:31:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3j3jbe6z3bfgg 2026-08-01 20:40:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2dcdmekf24 2026-08-01 20:40:58+00:00| seen|...
CVE-2026-67352
luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...
CVE-2026-67333
better-auth before 1.6.13 and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3 fail to validate the scheme of redirecturis registered via the deprecated oidc-provider plugin and the mcp plugin which wraps the same provider. An attacker can register an OAuth client with a javascript:...
CVE-2026-67316
axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...
CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...
CVE-2026-67316
axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...