13356 matches found
CVE-2026-3100
creationtimestamp| type| source ---|---|--- 2026-02-25 09:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfoeownhqh2n...
CVE-2026-3166
creationtimestamp| type| source ---|---|--- 2026-02-25 08:39:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfobt26m7u2l 2026-02-25 09:16:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfodtygypj2y 2026-02-25 19:20:09+00:00| seen|...
MAL-2026-1229 Malicious code in @schedaero/net-common (npm)
Malicious package due to suspicious preinstall script, data exfiltration via User-Agent, process termination, and a suspicious URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5e87e24ed2574837f59c3fb4cf21d0c9677b4d5e729f0835fc90a9bf427c4c The package...
Arbitrary Code Injection
Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...
CVE-2026-3057
creationtimestamp| type| source ---|---|--- 2026-02-24 06:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflislqsqa2n...
EUVD-2026-7396
A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the file hummer-common/hummer-common-core/src/main/java/com/hummer/common/core/utils/CommandUtils.java of the component Archive Extraction. The manipulation leads to path traversal...
CVE-2026-3067
CVE-2026-3067 affects HummerRisk up to version 1.5.0, targeting the Archive Extraction code path in hummer-common-core: CommandUtils.extractTarGZ and extractZip. The issue enables path traversal via manipulation of extracted archives, and is remotely exploitable. Public disclosure of the exploit ...
HummerCloud HummerRisk 路径遍历漏洞
HummerCloud HummerRisk is an open-source cloud-native security platform developed by HummerCloud Corporation. It addresses security and governance issues in cloud-native environments in a non-invasive manner. Its core capabilities include security governance for hybrid clouds and cloud-native...
ROS-20260224-73-0009
A vulnerability in the Apache Common Text library of FileMaker Server is related to improper control of code generation when using interpolation functions. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
PT-2026-21781
Name of the Vulnerable Software and Affected Versions Genetec Update Service affected versions not specified Description A local administrator may be able to obtain information from the Genetec Update Service configuration web page. An authenticated Windows user with administrator privileges coul...
Data Breaches in 2026: What’s old, what’s new?
Data breaches in 2026 explained, new cyber threats, AI driven attacks, common breach causes, and practical security strategies for individuals and businesses...
DEBIAN-CVE-2025-61147
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decodercontext::computeframedroptable...
CVE-2026-2945 JeecgBoot uploadImgByHttp server-side request forgery
A weakness has been identified in JeecgBoot 3.9.0. Affected by this vulnerability is an unknown functionality of the file /sys/common/uploadImgByHttp. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack may be launched remotely. The exploit has bee...
PT-2026-21457
Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711 Description A buffer overflow condition exists in the strcpy function within the /goform/formTaskEdit ap file of UTT HiPER 810G. The issue stems from manipulating the txtMin2 argument. This allows for...
DEBIAN-CVE-2026-27205
Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...
CVE-2020-8165
creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:02+00:00| seen| https://gist.github.com/tu-trinh-scale/43724f4565a68c378a712b69b412cbe1 2026-04-14 10:27:03+00:00| seen| https://gist.github.com/zhaog100/f7442a42e06d52a6f0350990fe3b28f1...
ROOT-APP-PYPI-CVE-2022-38054 CVE-2022-38054 in rootio-apache-airflow - Patched by Root
Root has patched CVE-2022-38054 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...
CVE-2017-4182
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
CVE-2026-26267
creationtimestamp| type| source ---|---|--- 2026-02-19 21:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaigszi7j2d 2026-02-20 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfd33y3zxk23...