58482 matches found
CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...
CVE-2026-17598
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...
CVE-2024-24210
creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...
GHSA-HMQ2-W58F-27JC GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython
Summary GitPython computes the on-disk location of a submodule's separate Git directory .git/modules/ from the submodule's .gitmodules section name with no validation. Because that name is fully attacker-controlled content of a cloned repository, a malicious repository can set a submodule name to...
GHSA-JFM3-95JQ-Q3RF
creationtimestamp| type| source ---|---|--- 2026-08-07 14:32:36+00:00| seen| https://gist.github.com/alon710/083e0c15dfeb9a6ae7deb8244b73b528...
CVE-2026-66838
creationtimestamp| type| source ---|---|--- 2026-08-07 14:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fhy2mjveaoejp...
GHSA-MH25-X5HQ-WRQP
creationtimestamp| type| source ---|---|--- 2026-08-07 13:34:35+00:00| seen| https://gist.github.com/alon710/09e2e2055df2711d8dcc906978bf0f47...
GHSA-MJ63-M3RC-8PPR
creationtimestamp| type| source ---|---|--- 2026-08-07 12:34:21+00:00| seen| https://gist.github.com/alon710/b81b5b8f072a27c4fa74e05558afb769...
CVE-2026-54212
creationtimestamp| type| source ---|---|--- 2026-08-07 12:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117054113463561947 2026-08-07 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msij23ny7t2v...
CVE-2026-15816
creationtimestamp| type| source ---|---|--- 2026-08-07 11:15:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3msigis4bs22s 2026-08-15 15:03:48+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mt4wzc3rdt2o...
CVE-2013-3821
creationtimestamp| type| source ---|---|--- 2026-08-07 11:00:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5eb8264-164c-4d3e-b562-e6bfed5d81bd...
CVE-2026-54202
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...
CVE-2026-54208 TeamDavid: Arbitrary File Write leading to Stored XSS
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content. This is possible because user input is written directly to files without proper...
CVE-2026-54202
The CVE-2026-54202 entry concerns Tobit Laboratories AG TeamDavid’s Webbox with a path traversal flaw in the archive creation function. The archive path is user-controlled and insufficiently validated, enabling an attacker to manipulate input to traverse directories and create folders in arbitrar...
EUVD-2026-54434
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...
CVE-2026-54202 TeamDavid: Path Traversal in the archive creation functionality
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...
GHSA-P8X7-9VFW-P7VC
creationtimestamp| type| source ---|---|--- 2026-08-07 09:39:30+00:00| seen| https://gist.github.com/alon710/839078dc1e6146ea4d82f12eb4312cc5...
CVE-2026-15211
creationtimestamp| type| source ---|---|--- 2026-08-07 08:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2p4g7ey6kaj6b...