13694 matches found
PT-2026-34067
Name of the Vulnerable Software and Affected Versions Oracle Life Sciences Empirica Signal versions 9.2.1 through 9.2.3 Description An issue in the Common Core component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...
SUSE SLES15 Security Update : kubernetes-old (SUSE-SU-2026:1489-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1489-1 advisory. This update for kubernetes-old rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description blo...
CVE-2026-23752
creationtimestamp| type| source ---|---|--- 2026-04-20 19:58:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxawex4jp2h...
CVE-2026-42199
creationtimestamp| type| source ---|---|--- 2026-04-20 18:42:12+00:00| published-proof-of-concept| https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp 2026-05-08 22:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlesrz5rvk2i...
CVE-2026-31429
creationtimestamp| type| source ---|---|--- 2026-04-20 11:37:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwew4fcs32k 2026-04-24 09:00:04+00:00| published-proof-of-concept| Telegram/eiq80vTfK0uEvpSaVkLstXl9YEDfyEgGUyA39bKhe3J3sOM 2026-04-24 21:00:04+00:00|...
CVE-2026-3517
creationtimestamp| type| source ---|---|--- 2026-04-20 11:13:25+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-371 2026-04-20 15:52:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwt7avbvg2e 2026-04-20 17:21:16+00:00| seen|...
OPENSUSE-SU-2026:20566-1 Security update for Botan
This update for Botan fixes the following issue: - CVE-2026-32884: Certificate validation bypass due to mixed-case Common Name in X.509 certificates bsc1261993...
CVE-2026-6563
creationtimestamp| type| source ---|---|--- 2026-04-19 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116430551736901385 2026-04-19 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjtlp2da3t22 2026-04-19 09:34:22+00:00| seen|...
airflow-balancer (>=0.7.0 <=0.7.6), airflow-clickhouse-plug (=1.6.2) +39 more potentially affected by CVE-2026-30912 via apache-airflow-core (>=3.0.0 <=3.1.8rc2)
apache-airflow-core PYPI version =3.0.0, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0, =0.1.0, =1.4.3, =0.2.0, =1.2.10, =0.1.1, =3.0.0, =1.6.0, =1.5.3, =1.25.0, =1.28.0rc1 and more Source cves: CVE-2026-30912 Source advisory: OSV:GHSA-W7CF-2PMC-5M4C...
airflow-balancer (>=0.7.0 <=0.7.6), airflow-clickhouse-plug (=1.6.2) +39 more potentially affected by CVE-2026-32690 via apache-airflow (>=3.0.0 <=3.1.8)
apache-airflow PYPI version =3.0.0, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0, =0.1.0, =1.4.3, =0.2.0, =1.2.10, =0.1.1, =3.0.0, =1.6.0, =1.5.3, =1.25.0, =1.28.0rc1 and more Source cves: CVE-2026-32690 Source advisory: OSV:GHSA-W9R4-94FJ-XP69...
Global Web, Local Privacy? an International Review of Web Tracking
Web tracking by ad networks, social networks, and other third parties is privacy-invasive. To protect users' privacy an increasing number of countries are adopting new privacy laws. However, a major reason why their application on the web is so challenging is that privacy laws are local while the...
ruby: WEBrick CGI source disclosure
Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus, 2 %2b encode...
CVE-2026-31317
creationtimestamp| type| source ---|---|--- 2026-04-17 18:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpjen3chh22 2026-04-20 20:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxbyegapb2q...
cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier
A flaw was found in OpenPrinting CUPS. A remote attacker can exploit a path traversal vulnerability in the RSS notifier by manipulating the notify-recipient-uri. This allows writing arbitrary RSS XML data to sensitive files outside the intended directory. This can lead to a denial of service DoS ...
CVE-2026-4817
creationtimestamp| type| source ---|---|--- 2026-04-17 06:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjodqwhbqp2f 2026-04-17 08:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjoj6ezi7t2i...
SUSE CVE-2026-40962
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC Common Encryption subsample data to libavformat/mov.c...
poc
poc Collection of my PoC's for various vulnerabilities. L...
@bechara/crux (>=6.0.0 <=6.6.2), @cappa/cli (>=0.1.0 <=0.8.2) +10 more potentially affected by CVE-2026-6270 via @fastify/middie (>=9.0.2 <=9.3.1)
@fastify/middie NPM version =9.0.2, =6.0.0, =0.1.0, =0.1.0, =1.0.0, =1.0.11, =0.1.51, =1.0.36, =11.0.0, =1.3.0, =5.0.0, =0.6.1-dev, =1.1.48 Source cves: CVE-2026-6270 Source advisory: SNYK:JS-FASTIFYMIDDIE-16098213...
