124514 matches found
CVE-2026-9547
creationtimestamp| type| source ---|---|--- 2026-07-03 09:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbxzt5px2l 2026-07-03 21:35:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriugcl452f 2026-07-08 16:01:27+00:00| seen|...
CVE-2026-9230
creationtimestamp| type| source ---|---|--- 2026-07-03 09:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbuoa3v62i 2026-07-03 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprhrglbwb2k 2026-07-03 22:35:41+00:00| seen|...
CVE-2026-9080
creationtimestamp| type| source ---|---|--- 2026-07-03 09:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqblol6pi22 2026-07-03 21:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriwslfl72k 2026-07-08 04:03:40+00:00| seen|...
CVE-2026-12168
creationtimestamp| type| source ---|---|--- 2026-07-03 09:36:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaowulub2o 2026-07-25 15:00:05+00:00| seen| https://t.me/ZerodayAlert/749 2026-07-26 00:00:38+00:00| seen| https://t.me/ZerodayAlert/749 2026-11-01 19:00:14+00:00|...
CVE-2026-4967
creationtimestamp| type| source ---|---|--- 2026-07-03 09:13:56+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpq7g3hxl62w 2026-07-03 21:36:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriv64ea32b 2026-07-05 23:00:19+00:00| seen|...
CVE-2026-8804
creationtimestamp| type| source ---|---|--- 2026-07-03 08:29:40+00:00| seen| https://bsky.app/profile/suriq.io/post/3mpq4ww3j3j2y 2026-07-03 10:11:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcmxo5yy2h 2026-07-03 22:35:24+00:00| seen|...
CVE-2026-10560
creationtimestamp| type| source ---|---|--- 2026-07-03 07:28:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzjscc3y2o 2026-07-20 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr22hl22k62u...
CVE-2026-12064
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
ALPINE-CVE-2026-12064
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
AZL-91812 CVE-2026-12064 affecting package curl for versions less than 8.11.1-10
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
CVE-2026-53358
creationtimestamp| type| source ---|---|--- 2026-07-03 07:15:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyrs72po2n 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-54409
creationtimestamp| type| source ---|---|--- 2026-07-03 07:06:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppycdprae2o 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6...
CVE-2026-9148 Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field
The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and including, 7.6.56 This is due to insufficient output escaping in the getCommentAuthor function, which interpolates the stored commentauthorurl...
CVE-2026-8926 password leak with netrc and user in URL
When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a username without a password, like https://[email protected]/, curl could wrongly get and use the password for another user set in the .netrc file for that host if such a one exists and there is n...
CVE-2026-8926
The curl utility (and libcurl ) is vulnerable to a password leak when it uses a .netrc file for credentials while the URL contains a username without a password (e.g., https://[email protected]/). In this scenario, if no exact match exists for the specified user, curl may incorrectly retrieve and ...
CVE-2026-8926
When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a username without a password, like https://[email protected]/, curl could wrongly get and use the password for another user set in the .netrc file for that host if such a one exists and there is n...
EUVD-2026-41502
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
CVE-2026-12064 proto-default skips SSH verification
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
CVE-2026-12064 proto-default skips SSH verification
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...
CVE-2026-12064
When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...