58943 matches found
CVE-2026-55607
Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks. By exploiting symlink manipulation and git fsmonitor...
CVE-2026-36907
creationtimestamp| type| source ---|---|--- 2026-06-29 14:48:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq7xwoyx2o 2026-06-29 21:48:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhqiwwz62t...
CVE-2026-36908
creationtimestamp| type| source ---|---|--- 2026-06-29 14:41:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpu2rr3h2e 2026-06-29 21:49:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhr4l2n22k...
CVE-2026-49983
creationtimestamp| type| source ---|---|--- 2026-06-29 13:58:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnghpgio2n...
CVE-2026-55517
creationtimestamp| type| source ---|---|--- 2026-06-29 13:57:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnfq24fu2d...
CVE-2026-13676
creationtimestamp| type| source ---|---|--- 2026-06-29 13:33:30+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpgm2jo5sk2k 2026-06-29 16:05:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguk3mdpl2d 2026-07-10 16:44:21+00:00| seen|...
GHSA-25FP-8W8P-MX36
creationtimestamp| type| source ---|---|--- 2026-06-29 13:27:42+00:00| seen| https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613...
CVE-2026-9799
creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:46+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815 2026-07-02 07:59:42+00:00| seen|...
CVE-2026-9705
creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:41+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815 2026-07-02 07:56:28+00:00| seen|...
CVE-2026-9083
creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:34+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815...
CVE-2026-13563
creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgj76gdbe2t 2026-06-29 19:36:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphadfcnq32x 2026-06-29 20:19:24+00:00| seen|...
CVE-2026-41992
creationtimestamp| type| source ---|---|--- 2026-06-29 12:36:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgivbc3n625 2026-06-29 20:59:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphey2ccpx2g 2026-07-01 02:33:54+00:00| seen|...
CVE-2026-13556
creationtimestamp| type| source ---|---|--- 2026-06-29 12:07:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgh7vndd52t 2026-07-01 23:36:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmonte7cp2q...
PYSEC-2026-559 Upsonic: remote code execution vulnerability in its MCP server/task creation functionality
Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...
PYSEC-2026-415 MLflow authentication requirement bypass can allow a user to arbitrarily create an account
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement...
CVE-2026-13551
creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfgos4cc2t...
CVE-2026-54820
creationtimestamp| type| source ---|---|--- 2026-06-29 10:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpgazmb4od2d...
Exploit for Missing Authentication for Critical Function in Splunk
CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unaut...
kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
A flaw was found in the Linux kernel's RDMA/mlx5 component. An error path fall-through in the mlx5ibdevressrqinit function, specifically when ibcreatesrq fails, can lead to the use of freed memory and error pointers. This memory corruption vulnerability could result in system instability, denial ...