62459 matches found
PT-2026-54046
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-24 Description An incorrect policy check allows remote attackers to bypass path policy restrictions in sandboxed conversion services. This flaw enables the creation or truncation of files that are disallowed...
PT-2026-54026
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.create channel permission can exploit a logic mismatch between existence validation and...
PT-2026-53896
A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0 up to 0.7.10, 0.8.0 up to 0.8.7, 0.9.0 up to 0.9.6 and 0.10.0 up to 0.10.7. An unauthenticated attacker with network access to the in-cluster rancher-webhook service could submi...
CVE-2026-56968
creationtimestamp| type| source ---|---|--- 2026-06-29 23:52:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphonpawcs27 2026-10-13 10:19:23+00:00| seen| MISP/f8adec39-0b02-47ba-9542-6b9dafe336bd...
CVE-2026-43699
creationtimestamp| type| source ---|---|--- 2026-06-29 23:35:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnpflppz2g 2026-07-01 02:51:18+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:59+00:00| seen|...
CVE-2026-54829
creationtimestamp| type| source ---|---|--- 2026-06-29 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mphmmd2wiq2i...
mariadb: mbstream: Unauthorized file creation via path traversal
A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...
CVE-2026-13763
creationtimestamp| type| source ---|---|--- 2026-06-29 22:45:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphkvs6ply2x 2026-06-29 23:29:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphndjd77w2u 2026-06-29 23:29:04+00:00| seen|...
CVE-2026-43745
creationtimestamp| type| source ---|---|--- 2026-06-29 22:32:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphk76fdf522 2026-07-01 02:50:38+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
CVE-2026-53429
creationtimestamp| type| source ---|---|--- 2026-06-29 22:19:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjheouc225...
CVE-2026-43732
creationtimestamp| type| source ---|---|--- 2026-06-29 22:18:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjfqwdmn23 2026-07-01 02:50:23+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...
CVE-2026-53404
creationtimestamp| type| source ---|---|--- 2026-06-29 22:15:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjaa6jki2d 2026-06-29 23:23:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmzpmaux2o 2026-06-29 23:31:20+00:00| seen|...
CVE-2026-53916
creationtimestamp| type| source ---|---|--- 2026-06-29 22:11:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphiyhkhyq2g 2026-07-03 10:53:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqexp6nu22y...
CVE-2026-13593
creationtimestamp| type| source ---|---|--- 2026-06-29 21:46:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhllqbix2z 2026-06-29 23:40:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnxisglw2k 2026-06-29 23:56:39+00:00| seen|...
CVE-2026-49434
creationtimestamp| type| source ---|---|--- 2026-06-29 21:28:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgldvzkq2a 2026-07-03 10:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfcdufmu2u...
CVE-2026-53427
creationtimestamp| type| source ---|---|--- 2026-06-29 21:27:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgkomq3j2e 2026-06-29 21:55:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphi4owxku22...
CVE-2026-53426
Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parsedocument/2 accepts a :json, json source. In lib/mdex.ex, the private jsontonode/1 function passes the attacker-controlled nodetype value to Module.concat/1, which calls...
SQL Injection
Overview snowflake-cli is a Snowflake CLI Affected versions of this package are vulnerable to SQL Injection via improper neutralization of parameters in the secret creation and spcs service log commands. An attacker can execute unintended SQL statements by supplying crafted input to vulnerable...
CVE-2026-57958
creationtimestamp| type| source ---|---|--- 2026-06-29 19:09:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph6tdx2xt22 2026-06-29 21:24:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgf7rael2y...