49650 matches found
CVE-2026-79992
creationtimestamp| type| source ---|---|--- 2026-08-25 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwiwowb5k2m 2026-08-25 19:33:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117157817243569863 2026-08-28 07:34:40+00:00| seen|...
CVE-2026-59682
creationtimestamp| type| source ---|---|--- 2026-08-25 16:59:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/c4gajlaaid4bv 2026-08-26 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty2mg26242c 2026-08-29 05:30:03+00:00| seen|...
DEBIAN-CVE-2026-79782
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...
DEBIAN-CVE-2026-79775
rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...
DEBIAN-CVE-2026-79780
rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...
DEBIAN-CVE-2026-79778
rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...
DEBIAN-CVE-2026-79776
rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...
DEBIAN-CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
DEBIAN-CVE-2026-79769
Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...
DEBIAN-CVE-2026-79674
NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access...
MINI-8RPG-9JPH-3F64
Bulletin has no description...
MINI-QGF2-FPR5-XCJP
Bulletin has no description...
MINI-W2HP-XFFW-2PH8
Bulletin has no description...
MINI-8W9R-RF7J-3QC9
Bulletin has no description...
MINI-4H98-W65H-7XXC
Bulletin has no description...
MINI-22M2-RC7M-295J
Bulletin has no description...
MINI-CCG6-6FG2-85CV
Bulletin has no description...
MINI-FVM9-58GV-2MQP
Bulletin has no description...