Lucene search
+L

135 matches found

vulnersOsv
vulnersOsv
•added 2026/08/04 11:34 a.m.•5 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

8.8CVSS5.8AI score0.0064EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/13 3:46 p.m.•5 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

9.6CVSS5.8AI score0.00665EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/07/13 3:46 p.m.•5 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

9.6CVSS5.8AI score0.00465EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/07 2:34 p.m.•5 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2024-38519 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2024-38519 Source advisory: OSV:PYSEC-2026-2065...

7.8CVSS5.8AI score0.00325EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/16 9:13 p.m.•6 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50574 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50574 Source advisory: OSV:GHSA-VX4Q-3CR2-7CG2...

9.6CVSS5.8AI score0.00465EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/16 8:59 p.m.•5 views

basketcase (4.0.0), lord-of-the-clips (>=0.1.0, <=0.1.6) +1 more potentially affected by CVE-2026-50023 via yt-dlp (2023.1.6)

yt-dlp PYPI version 2023.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 4.0.0 - lord-of-the-clips =0.1.0, =0.0.1, =0.9.2 Source cves: CVE-2026-50023 Source advisory: OSV:GHSA-C6MH-FPJC-4PR3...

9.6CVSS5.8AI score0.00665EPSS
SaveExploits1
Packet Storm News
Packet Storm News
•added 2026/03/04 12:00 a.m.•17 views

From Threat Intelligence to Firewall Rules: Semantic Relations in Hybrid AI Agent and Expert System Architectures

Web security demands rapid response capabilities to evolving cyber threats. Agentic Artificial Intelligence AI promises automation, but the need for trustworthy security responses is of the utmost importance. This work investigates the role of semantic relations in extracting information for...

6AI score
SaveExploits0
Veracode
Veracode
•added 2026/02/18 10:09 a.m.•24 views

Improper Access Control

misskey-js is vulnerable to improper access control. The vulnerability is due to insufficient authorization checks when exporting posts, which allows an attacker without permission to export posts and view favorites or clips they should not be able to access...

7.1CVSS5.9AI score0.00314EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:16 a.m.•23 views

CVE-2019-2322

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

9.8CVSS8.2AI score0.00903EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:14 a.m.•26 views

CVE-2022-33266

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content...

7.8CVSS8AI score0.00118EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/16 11:55 p.m.•18 views

CVE-2025-66402

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue...

7.1CVSS5.9AI score0.00314EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/16 12:16 a.m.•26 views

CVE-2025-66402

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue...

7.1CVSS0.00314EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•11 views

CVE-2025-66402: Missing Authorization

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue...

7.1CVSS5.9AI score0.00314EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/12/15 8:55 p.m.•24 views

misskey.js's export data contains private post data

Summary After adding private posts followers, direct that you do not have permission to view to your favorites or clips, you can export them to view the contents of the private posts. PoC 1. Create an account X for testing and an account Y for private posts on the same server. 2. Send appropriate...

7.1CVSS5.9AI score0.00314EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2025/12/15 8:55 p.m.•51 views

GHSA-496G-MMPW-J9X3 misskey.js's export data contains private post data

Summary After adding private posts followers, direct that you do not have permission to view to your favorites or clips, you can export them to view the contents of the private posts. PoC 1. Create an account X for testing and an account Y for private posts on the same server. 2. Send appropriate...

7.1CVSS5.8AI score0.00314EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•25 views

PT-2025-51322

Name of the Vulnerable Software and Affected Versions Misskey versions 13.0.0-beta.16 through 2025.12.0 Description Misskey is a federated social media platform. Users without the necessary permissions to view favorites or clips could export posts and access their contents. Recommendations Update...

7.1CVSS5.8AI score0.00314EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•6 views

PT-2025-54684

Summary After adding private posts followers, direct that you do not have permission to view to your favorites or clips, you can export them to view the contents of the private posts. PoC 1. Create an account X for testing and an account Y for private posts on the same server. 2. Send appropriate...

7.1CVSS5.9AI score0.00314EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-9071

Malware in sbrugna...

5.5CVSS6AI score0.00183EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-3653

Malware in sbrugna...

10CVSS8.1AI score0.01093EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-5378

Malware in sbrugna...

10CVSS8.1AI score0.00902EPSS
SaveExploits0References2
Rows per page
Query Builder