59075 matches found
CVE-2026-32699
creationtimestamp| type| source ---|---|--- 2026-04-26 03:00:05+00:00| published-proof-of-concept| Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs...
CVE-2026-6992
creationtimestamp| type| source ---|---|--- 2026-04-26 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116468065185354062 2026-04-26 00:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkeas6tx2z2j 2026-07-13 22:00:19+00:00| seen|...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014323)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014323 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently,...
Server-side Request Forgery (SSRF)
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser profile creation process. An attacker can cause unauthorized requests to internal network resources by storing a profile with a cdpUrl...
NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks
NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...
OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks
Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...
CVE-2026-23541
creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukrhzx2t...
CVE-2025-67945
creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:14+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukmjh42i...
CVE-2025-49867
creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukeft52x...
CVE-2026-41177
creationtimestamp| type| source ---|---|--- 2026-04-25 21:02:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81660 2026-04-25 23:00:15+00:00| published-proof-of-concept| Telegram/LSdGKxP2miqFlHNpxxgJAVXofgySUEN1UvPjtEQ3z8Pk2CQ 2026-04-26 03:00:05+00:00| published-proof-of-concept...
CVE-2026-6043
P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the...
CVE-2026-5767
creationtimestamp| type| source ---|---|--- 2026-04-25 12:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkd2eoas5o2l...
CVE-2026-31674
creationtimestamp| type| source ---|---|--- 2026-04-25 10:20:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464839048739557 2026-04-25 22:24:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467685885034222 2026-05-05 20:00:00+00:00| seen|...
CVE-2026-31682
creationtimestamp| type| source ---|---|--- 2026-04-25 10:06:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464783504751353 2026-04-25 20:30:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467237575005440 2026-05-05 20:00:00+00:00| seen|...
CVE-2026-41277
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated users to control the primary key id and internal state fields of DocumentStore entities. Because the...
CVE-2026-31650
creationtimestamp| type| source ---|---|--- 2026-04-25 05:23:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116463671145457300...
[SECURITY] Fedora 44 Update: buildah-1.43.1-1.fc44
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
SUSE CVE-2026-31646
In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix pagepool error handling in lan966xfdmarxallocpagepool pagepoolcreate can return an ERRPTR on failure. The return value is used unconditionally in the loop that follows, passing the error pointer through...
GHSA-PMWG-CVHR-8VH7
creationtimestamp| type| source ---|---|--- 2026-04-24 22:53:42+00:00| seen| Telegram/Vx6nINpqXkyN9lWmYzg7wzzb7SobZ66OCYhgiINimz-nM3E 2026-05-05 05:40:29+00:00| seen| https://gist.github.com/alon710/1fe74fd0f0234822bdcb48ade706690f 2026-07-21 12:51:15+00:00| seen|...