111967 matches found
DEBIAN-CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
AZL-95465 CVE-2026-64653 affecting package gh 2.62.0-20
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-48080
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANTADMIN of that tenant, including the databaseUrl field. This field contains...
CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-57818
creationtimestamp| type| source ---|---|--- 2026-08-06 20:59:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dap3dxstobqir 2026-08-07 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msj5joorvl2b...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
CVE-2026-71478
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...
CVE-2026-34502
creationtimestamp| type| source ---|---|--- 2026-08-06 20:23:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5srs56fggdye6...
CVE-2026-64640
creationtimestamp| type| source ---|---|--- 2026-08-06 19:53:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fkstcuwaltx53 2026-08-08 23:32:42+00:00| seen| Telegram/C3q2vOTdkXA6iF-hzMGQrZVnDCfVSala-72eNVn5iLBkyI 2026-08-09 00:05:53+00:00| published-proof-of-concept|...
MAL-2026-13456 Malicious code in santana-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01fc218f60217e160355fc41c6006c25da2197ea1fec2b3402df38e125e4252 santana-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js line 425 and again at line 436 reconstructs a destination URL...
GHSA-8RXV-JG7P-WVG3
creationtimestamp| type| source ---|---|--- 2026-08-06 19:32:23+00:00| seen| https://gist.github.com/alon710/73aecb4bf7a9c9303fe6451f784d95ea...
CVE-2026-9205
creationtimestamp| type| source ---|---|--- 2026-08-06 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgphlo4ks2m...
CVE-2026-58158
creationtimestamp| type| source ---|---|--- 2026-08-06 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgjpi53yw2r...
CVE-2026-3430
creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjehd5472n...
CVE-2026-71446
The CVE-2026-71446 vulnerability affects the AIL Framework, specifically the crawler domain view where crawled URLs are embedded directly into a JavaScript onclick handler for the stored screenshot feature. The root cause is inadequate encoding of the stored URL, allowing an attacker to inject Ja...
CVE-2026-70637
creationtimestamp| type| source ---|---|--- 2026-08-06 16:14:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dfebd4n6mb6sx...
CVE-2026-65573
creationtimestamp| type| source ---|---|--- 2026-08-06 16:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggn3kn6l2m...
CVE-2026-65553
creationtimestamp| type| source ---|---|--- 2026-08-06 16:08:30+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggfx7l7n2p 2026-08-10 08:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspnvqxdlh2r 2026-08-11 04:16:08+00:00| seen|...
CVE-2026-65546
creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcd7m3t2o 2026-08-12 00:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msttzaxsnp2a...