5883 matches found
CVE-2026-58293 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-14613
creationtimestamp| type| source ---|---|--- 2026-07-03 17:56:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4lwq3hx23 2026-08-25 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwiw3pf26...
CVE-2026-50238
Rejected reason: Red Hat Product Security has concluded that this CVE is not required. The reported issue has been classified as a regular bug and will be addressed through the standard bug-fixing process...
CVE-2026-4772
creationtimestamp| type| source ---|---|--- 2026-07-03 03:54:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnkmjaf22n...
SUSE CVE-2026-54673
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers -...
CVE-2026-14617: Improper Handling of Case Sensitivity
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer.filterandaccumulate of the file gateway/streamconsumer.py of the component Streaming Reasoning Tag Filter. The manipulation leads to improper handling of case...
PT-2026-55660
Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 2026.4.31 Description An issue exists in the Streaming Reasoning Tag Filter component within the GatewayStreamConsumer. filter and accumulate function located in the gateway/stream consumer.py file...
CVE-2026-34096
creationtimestamp| type| source ---|---|--- 2026-07-02 09:32:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpyymgeu2r...
SUSE CVE-2026-58012
A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...
CVE2PoC
CVE2PoC A prototype for generating real npm vulnerability PoC...
CVE-2026-14116
creationtimestamp| type| source ---|---|--- 2026-07-01 21:49:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmipmuagg2y 2026-07-02 01:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmw6aclvd2y 2026-07-02 08:17:37+00:00| seen|...
crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...
crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...
CGA-65W6-9QQR-6693
Bulletin has no description...
OPENSUSE-SU-2026:21201-1 Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation bsc1268897. - CVE-2026-54513: jackson-databind has an array...
CVE-2026-54673
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...
CVE-2026-13935
Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-54673 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-updater allows for automatic updates for Electron apps. Prior to 9.7.0, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization", exposing credentials. Other credential-bearing headers —...