124509 matches found
CVE-2023-48056
creationtimestamp| type| source ---|---|--- 2026-07-06 04:51:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc6e4cbb2f...
CVE-2026-14787
creationtimestamp| type| source ---|---|--- 2026-07-06 04:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpx7gnkinz2c 2026-07-07 23:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq3sqqm3dl2y...
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...
CVE-2020-21733
creationtimestamp| type| source ---|---|--- 2026-07-06 02:18:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzmff2qf2b...
CVE-2026-14803
creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...
CVE-2021-28927
creationtimestamp| type| source ---|---|--- 2026-07-06 01:58:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwyiouca52i...
CVE-2026-49420
creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...
CVE-2026-14771
creationtimestamp| type| source ---|---|--- 2026-07-06 00:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwszzn37a2n 2026-07-07 08:03:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25ejsrx42g...
CVE-2026-10657
creationtimestamp| type| source ---|---|--- 2026-07-06 00:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwsd2euuv22 2026-07-07 12:06:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2kwdklox2s...
CVE-2026-59519
creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...
PT-2026-55914
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
PT-2026-56075
Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.17 Coder versions prior to 2.32.7 Coder versions prior to 2.33.8 Coder versions prior to 2.34.2 Description The coder open app command opens external workspace-app URLs without validating the scheme or host. If an...
CVE-2026-54893: Improper Encoding or Escaping of Output
URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address...
Debian dla-4670 : php-phpseclib - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4670 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4670-1 [email protected]...
PT-2026-67301
Name of the Vulnerable Software and Affected Versions axios versions 0.31.1 through 0.32.x axios versions 1.15.1 through 1.17.x Description An incomplete depth-limit bypass exists in lib/helpers/toFormData.js when serializing objects with top-level keys ending in . When such a key is present, the...
RHCOS 4 : OpenShift Container Platform 4.15.66 (RHSA-2026:28961)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28961 advisory. - golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 - crypto/x509: golang: Denial of Service...
CVE-2025-8591: Improper Neutralization of Input During Web Page Generation
The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back to the user's browser. This condition allows an attacker to inject malicious script content into pages served by the application. By leveraging this weakness, an attacker can...
PT-2026-55971
Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...
CVE-2026-59520
creationtimestamp| type| source ---|---|--- 2026-07-05 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrsytwez2p 2026-07-07 08:04:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25geh37n2v...
CVE-2026-49097
creationtimestamp| type| source ---|---|--- 2026-07-05 20:27:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfypfiwx2f 2026-07-09 03:53:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qbtwq7k2y 2026-07-20 15:00:03+00:00| published-proof-of-concept|...