58953 matches found
CVE-2026-25119
Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. A...
CVE-2026-53117
creationtimestamp| type| source ---|---|--- 2026-06-24 18:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2lqfxdsf2o...
CVE-2026-53121
creationtimestamp| type| source ---|---|--- 2026-06-24 18:32:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kh5tlkn2t 2026-07-23 21:26:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdroo4zxs2y...
CVE-2026-48720
Warp is an agentic development environment. From 0.2025.03.05.08.02.stable00 until 0.2026.05.06.15.42.stable01, Warp accepts non-inline OSC 1337;File payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is...
CVE-2026-53129
creationtimestamp| type| source ---|---|--- 2026-06-24 18:16:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jkgsgap2i...
CVE-2026-11878
creationtimestamp| type| source ---|---|--- 2026-06-24 17:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2hj6q7od23 2026-07-20 05:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2l7zmipy2l...
CVE-2019-12768
creationtimestamp| type| source ---|---|--- 2026-06-24 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2hdkb6tm2h...
CVE-2026-52979
In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...
CVE-2026-52979
In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...
CVE-2026-52979 net: psp: check for device unregister when creating assoc
In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...
CVE-2026-52979
CVE-2026-52979 is a Linux kernel vulnerability in the PSP subsystem. The issue arises in psp_assoc_device_get_locked(): it takes a psp_dev reference via psp_dev_get_for_sock() (which uses psp_dev_tryget() under RCU), then acquires psd->lock and drops the registration reference. If psp_dev_unre...
CVE-2026-56358
creationtimestamp| type| source ---|---|--- 2026-06-24 14:31:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp24yidzsx2r...
CVE-2026-56368
creationtimestamp| type| source ---|---|--- 2026-06-24 14:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp24gl6h7e2p...
CVE-2026-56761
creationtimestamp| type| source ---|---|--- 2026-06-24 14:11:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp23unyhat2i...
CVE-2026-56270
creationtimestamp| type| source ---|---|--- 2026-06-24 13:55:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp22xcos3g2f 2026-07-10 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbxdatcfq26 2026-08-17 09:00:27+00:00| exploited|...
EUVD-2026-38754
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...
CVE-2026-56351 n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-56351
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-56358
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...