112450 matches found
BIT-GITLAB-2026-12635 Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to make requests to internal network resources through...
Malicious code in checkmarx-claude-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a16e61d88e467ada75205ee93a9339cdf2fb65f3ded068282b4d83b6cb05e9 When the CLI runs the documented npx checkmarx-claude-cache invocation pattern, bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike ho...
MAL-2026-6576 Malicious code in checkmarx-claude-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a16e61d88e467ada75205ee93a9339cdf2fb65f3ded068282b4d83b6cb05e9 When the CLI runs the documented npx checkmarx-claude-cache invocation pattern, bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike ho...
CVE-2026-13540 GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery
A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRepository.setURI of the file src/main/scala/gitbucket/core/service/RepositoryCreationService.scala. Performing a manipulation of the argument url results in server-side request forgery. The attack i...
CVE-2026-54282
A flaw was found in Starlette, a lightweight Asynchronous Server Gateway Interface ASGI framework. Prior to version 1.3.0, the HTTP request path was not properly validated when reconstructing the request.url. A remote attacker could craft a malicious HTTP request path that does not begin with a...
CVE-2026-13526
creationtimestamp| type| source ---|---|--- 2026-06-29 04:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmryyzdh2e...
CVE-2026-13530
creationtimestamp| type| source ---|---|--- 2026-06-29 04:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmjzor3l23 2026-06-29 19:54:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphbe7zq3r2d...
CVE-2026-13519
creationtimestamp| type| source ---|---|--- 2026-06-29 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfiomtph42p 2026-06-29 04:33:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfnv4hres27 2026-06-29 12:59:29+00:00| seen|...
CVE-2026-49991
creationtimestamp| type| source ---|---|--- 2026-06-29 01:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfby6r6fp2x 2026-06-29 05:10:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpfpwvwcr226...
CVE-2026-56123
creationtimestamp| type| source ---|---|--- 2026-06-29 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfaoajjhc2y...
PT-2026-53283
Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 2025.5.0 Description The iOS companion app fails to respect the SSID allowlist for internal networks. While the app typically uses the Service Set Identifier SSID—the public name of a wireless network—to...
PT-2026-53251
Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description An OS command injection flaw exists in the POST Request Handler component. A remote attacker can exploit this by manipulating the submit-url argument within the formAccept function of the...
PT-2026-53652
Name of the Vulnerable Software and Affected Versions googleapis/mcp-toolbox affected versions not specified Description A path traversal issue exists in the HTTP tool URL builder. When constructing downstream API requests, the tool substitutes user-controlled pathParams into the configured tool...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-2581 DESCRIPTION: This is an uncontrolled resource consumption vulnerability CWE-400 that can lead to Denial of Service DoS. In vulnerable Undici...
CVE-2009-3476
creationtimestamp| type| source ---|---|--- 2026-06-28 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpekuu6zb62w...
CVE-2026-53284
creationtimestamp| type| source ---|---|--- 2026-06-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpeh6og4qu2x 2026-06-29 10:39:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgce6ypph2t...
CVE-2010-2452
creationtimestamp| type| source ---|---|--- 2026-06-28 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpeftvzoqr2w...
CVE-2026-13500
creationtimestamp| type| source ---|---|--- 2026-06-28 16:06:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpee5br4c727 2026-06-29 14:50:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqe2fyrg2o 2026-06-29 17:05:18+00:00| seen|...
CVE-2026-13490
creationtimestamp| type| source ---|---|--- 2026-06-28 13:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe4tnqnwd2s 2026-06-29 19:28:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ujffep23...