31557 matches found
CVE-2023-54338
creationtimestamp| type| source ---|---|--- 2026-01-14 02:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdykn7uyz2m...
CVE-2026-0494
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted...
CVE-2026-0511
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...
CVE-2026-0495
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...
PT-2026-2917
AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...
CVE-2025-46299
A flaw was found in WebKitGTK. Processing malicious web content can cause a memory initialization issue due to improper memory handling and result in the disclosure of the internal states of the application. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat...
CVE-2022-50938 CONTPAQi® AdminPAQ 14.0.0 - Unquoted Service Path
CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path vulnerability in the AppKeyLicenseServer service running with LocalSystem privileges. Attackers can exploit the unquoted path to inject malicious code in the service binary path, potentially executing arbitrary code with elevated system...
EUVD-2026-1869
virtualenv Has TOCTOU Vulnerabilities in Directory Creation...
GHSA-597G-3PHW-6986 virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...
CVE-2025-36640
A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges...
CVE-2025-36640 Local Privilege Escalation
A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges...
CVE-2025-36640
CVE-2025-36640 affects the Nessus Agent Tray App on Windows hosts. The vulnerability stems from an installation/uninstallation issue that could lead to local privilege escalation. The CVSS metrics indicate high impact across confidentiality, integrity, and availability with local attack vector an...
GHSA-MQW7-C5GG-XQ97 Jervis Has a RSA PKCS#1 Padding Vulnerability
Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL463-L465...
Astra Linux – Vulnerability in docker.io-app
Moby v25.0.0 – v26.0.2 is vulnerable to NULL Pointer Dereference attacks through the daemon/images/imagehistory.go module...
CVE-2025-14001
creationtimestamp| type| source ---|---|--- 2026-01-13 13:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mccplq7p2f2m...
BIT-VIRTUALENV-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...
Exploit for CVE-2026-22804
Termix Stored XSS PoC GHSA-m3cv-5hgp-hv35 This repository c...
CVE-2025-66176
creationtimestamp| type| source ---|---|--- 2026-01-13 03:54:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbnu6sx4u2u 2026-01-13 04:00:34+00:00| seen| Telegram/UkQy5p66ZqtUntQbyuL7Mmw6MfrjmrDI9c523Bq1eF22IU 2026-01-13 06:26:45+00:00| seen|...