58956 matches found
EUVD-2026-32050
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via sendfile. sendfile opens its string argument with Perl's 2-arg open. The 2-arg form interprets magic prefixes: '| cmd' and 'cmd |' open a pipe to a subprocess, ' path' and ' path' open the path for write or append. Untruste...
CVE-2026-7119
creationtimestamp| type| source ---|---|--- 2026-05-27 04:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmsmzfpwys2p...
CVE-2026-9628
creationtimestamp| type| source ---|---|--- 2026-05-27 04:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmnat2lv2t 2026-05-27 05:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrtuw2qm2i...
SUSE CVE-2025-22240
Arbitrary directory creation or file deletion. In the findfile method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgtenv” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to...
CVE-2026-49017
creationtimestamp| type| source ---|---|--- 2026-05-27 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116644303789823901 2026-05-27 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsjca6nvq2v 2026-05-27 05:00:31+00:00| seen|...
CVE-2026-9606
creationtimestamp| type| source ---|---|--- 2026-05-27 01:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsft3xj642p...
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences e.g., ../ or path separators in these parameters, attackers can cause file...
CVE-2026-46740
creationtimestamp| type| source ---|---|--- 2026-05-27 00:27:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsaqmimy72u 2026-05-27 00:58:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmscime3hs2q...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the AppArmor module failing to handle cases where sock and sock-sk might be NULL during socket...
PT-2026-43760
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the AppArmor module where table creation from source blobs originating in userspace may involve unaligned memory accesses. This issue occurs because the source blob migh...
CVE-2026-45969
In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Add missing check for inputffcreatememless The psgamepadcreate function calls inputffcreatememless without verifying its return value, which can lead to incorrect behavior or potential crashes when FF effects ar...
CVE-2026-46033
In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject short ahash digests during instance creation authencesn requires either a zero authsize or an authsize of at least 4 bytes because the ESN encrypt/decrypt paths always move 4 bytes of high-order sequen...
dalfox 代码问题漏洞
Dalfox is an automated cross-site script scanning tool developed by HAHWUL. Versions of Dalfox prior to 2.13.0 contained code vulnerabilities. These vulnerabilities stemmed from the REST API server mode, where the output, output-all, and debug fields were deserialized directly from the attacker’s...
PT-2026-43538
Name of the Vulnerable Software and Affected Versions Login with NEAR plugin for WordPress versions prior to 0.3.4 Description The plugin contains an authentication bypass flaw within the ajaxLoginWithNear function. This function is registered as a wp ajax nopriv action, making it accessible to...
CVE-2026-45893
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from userspace and might be unaligned. Try to optize the copying process by avoiding unaligned memory accesses. - Added Fixes tag - Added...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the hfsbnodecreate function in the hfsplus file system. This function returns a node when it...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the hash digest length during the creation of authentication instance...
CVE-2026-9573
creationtimestamp| type| source ---|---|--- 2026-05-26 23:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms55s5jkp2v...
CVE-2026-42013
creationtimestamp| type| source ---|---|--- 2026-05-26 23:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xxz5sd2z 2026-06-29 11:40:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfrbkrxz2o...