62447 matches found
CVE-2026-35847
creationtimestamp| type| source ---|---|--- 2026-07-31 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxnh4gb4m2a...
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns
A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...
Important: Red Hat Security Advisory: abrt security update
An update for abrt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
GHSA-R2V3-8GWF-7GHM vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
Summary The vault-secrets-webhook reads the vault.security.banzaicloud.io/vault-addr annotation from any ConfigMap or Secret being admitted and uses it as the Vault server address without any validation or allowlist. When a ConfigMap or Secret contains a value prefixed with vault:, the webhook's...
CVE-2026-17059
creationtimestamp| type| source ---|---|--- 2026-07-31 17:04:16+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrxgquksow2h...
CVE-2026-17347
creationtimestamp| type| source ---|---|--- 2026-07-31 17:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgl4s7yf2a 2026-08-01 09:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz73zqg4s2m 2026-08-01 09:53:08+00:00| seen|...
CVE-2025-69937
creationtimestamp| type| source ---|---|--- 2026-07-31 16:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgcad7e52v...
GHSA-XRMJ-5G4G-8987
creationtimestamp| type| source ---|---|--- 2026-07-31 16:33:01+00:00| seen| https://gist.github.com/alon710/e1fe3e68fe3d799c84bb3e82e35d7e46...
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
Summary @dynatrace-oss/dynatrace-mcp-server v1.8.5 exposes an HTTP transport mode --http flag that performs no authentication, session validation, or origin/host verification before dispatching MCP tool calls. Any network-reachable attacker can send a raw JSON-RPC tools/call request without an...
GHSA-P7W7-4929-VPJ5 `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
Summary @dynatrace-oss/dynatrace-mcp-server v1.8.5 exposes an HTTP transport mode --http flag that performs no authentication, session validation, or origin/host verification before dispatching MCP tool calls. Any network-reachable attacker can send a raw JSON-RPC tools/call request without an...
CVE-2025-69938
creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcmapwft2y...
CVE-2026-28812
creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcm7hwyh2z...
CVE-2026-27060
creationtimestamp| type| source ---|---|--- 2026-07-31 15:44:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxcbkstiw2u 2026-07-31 17:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrxiy5imiu2q...
CVE-2026-17561
creationtimestamp| type| source ---|---|--- 2026-07-31 13:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrx3hcpzko2e 2026-07-31 14:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4itkdeb2o 2026-08-01 03:00:29+00:00| seen|...
EUVD-2025-210568
A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...
CVE-2026-64804
creationtimestamp| type| source ---|---|--- 2026-07-31 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwuhubrry2v...
CVE-2026-62391
creationtimestamp| type| source ---|---|--- 2026-07-31 11:36:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2 2026-09-02 12:05:14+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j...
CVE-2026-64809
creationtimestamp| type| source ---|---|--- 2026-07-31 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwss7tt7d23...
CVE-2026-63222
creationtimestamp| type| source ---|---|--- 2026-07-31 11:00:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrwsfzyslz2z 2026-08-08 04:36:33+00:00| seen| https://gist.github.com/alon710/42c040ec6976f6b1c65452acd65815a5...