58968 matches found
CVE-2026-42541
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-31245
The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint POST /memories. The endpoint allows unauthenticated users to submit arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by sending...
CVE-2026-45736
creationtimestamp| type| source ---|---|--- 2026-05-12 17:22:10+00:00| published-proof-of-concept| https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx 2026-05-19 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mm7drfy4hj2o 2026-05-27...
CVE-2026-41293
creationtimestamp| type| source ---|---|--- 2026-05-12 17:15:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mloc2ajsvu2j 2026-07-09 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqapsxsqnv25...
CVE-2026-7437
creationtimestamp| type| source ---|---|--- 2026-05-12 16:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlo7piqk362l 2026-05-12 17:13:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mlobxbow3o2s...
CVE-2026-32177
creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:17+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0143 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-35415
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-34332
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-35424
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40369
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-40405
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
CVE-2026-33838
creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...
WordPress Broadstreet plugin <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation vulnerability
Missing Authorization to Authenticated Subscriber+ Advertiser Creation vulnerability discovered by greenhats - Student in WordPress Plugin Broadstreet Ads versions = 1.53.1...
GHSA-RHV4-8758-JX7V
creationtimestamp| type| source ---|---|--- 2026-05-12 15:40:29+00:00| seen| https://gist.github.com/alon710/d3518b26e6387505ec4774e026b70deb...
CVE-2026-7464
creationtimestamp| type| source ---|---|--- 2026-05-12 15:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlo4e7kkin2i 2026-05-12 16:23:26+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mlo75uxgi72a...
GHSA-8HF9-3Q64-Q2QF Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option
Summary When dalfox is run in REST API server mode, the output, output-all, and debug fields in model.Options are JSON-tagged and deserialized directly from the attacker's request body, then propagated unchanged through dalfox.Initialize into the scan engine's logging path. The logger opens the...
CVE-2026-45282
creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a...
CVE-2026-43321
creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxyuivww2u...
CVE-2026-28374
creationtimestamp| type| source ---|---|--- 2026-05-12 14:04:59+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mlnxgmxk2c23 2026-05-13 00:10:05+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mlozakkufh2g...