CVE-2026-26056

CVE-2026-26056 affects Yoke ATC in 0.19.0 and earlier. A vulnerability in the ATC controller allows users with create/update permissions to inject a malicious URL via the overrides.yoke.cd/flight annotation, causing the ATC controller to download and execute an arbitrary WASM module without prope...

CVE-2026-26056 Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...

GHSA-89P3-4642-CR2W

creationtimestamp| type| source ---|---|--- 2026-02-12 20:10:23+00:00| seen| https://gist.github.com/alon710/d04c9ed716c8cbccbfced51ccf8ca09b...

GHSA-G966-83W7-6W38

creationtimestamp| type| source ---|---|--- 2026-02-12 19:40:23+00:00| seen| https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0 2026-02-25 01:08:02+00:00| seen| https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222...

CVE-2026-21438

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption repeatedly creating and closing many WebTransport streams. Closed streams were not removed from an internal session map, preventing garbage collection of their...

CVE-2026-21438

creationtimestamp| type| source ---|---|--- 2026-02-12 19:10:24+00:00| seen| https://gist.github.com/alon710/65570bea1d8bf7bce8ccfbb01e9a80b6...

CVE-2026-26081

creationtimestamp| type| source ---|---|--- 2026-02-12 18:15:59+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3meolxfmees2c 2026-02-13 15:05:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrmhjz42e...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch due to the GalaxyFDSClientImpl.createHttpClient function. An attacker can intercept and modify communications by performing a man-in-the-middle attack when TLS hostname verification ...

SUSE-SU-2026:0479-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container, virt-synchronization-controller-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container,...

CVE-2026-25949

creationtimestamp| type| source ---|---|--- 2026-02-12 09:30:50+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-89p3-4642-cr2w 2026-02-12 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meo6iyonxk2n 2026-02-12 20:10:23+00:00|...

CVE-2025-64487

creationtimestamp| type| source ---|---|--- 2026-02-12 07:17:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menh5pzd3k25 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framewo...

CVE-2026-26235

creationtimestamp| type| source ---|---|--- 2026-02-12 07:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meng6s67ta2a 2026-02-12 10:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3menqbln3bn2f 2026-02-12 10:00:32+00:00| seen|...

CVE-2025-69872

creationtimestamp| type| source ---|---|--- 2026-02-12 03:40:05+00:00| seen| https://gist.github.com/alon710/0200df30a379157e0773cd5b4e58eb75 2026-02-13 19:55:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3merbxk3x6p2x...

CVE-2026-26014

creationtimestamp| type| source ---|---|--- 2026-02-12 02:40:05+00:00| seen| https://gist.github.com/alon710/3a12f0f5fd4b6863fd1cb17756a47aa1...

GHSA-GF3V-FWQG-4VH7

creationtimestamp| type| source ---|---|--- 2026-02-12 02:10:05+00:00| seen| https://gist.github.com/alon710/acaa62d2c9f4a729ff2d09cb5a58ff4d...

CVE-2026-20614

creationtimestamp| type| source ---|---|--- 2026-02-12 01:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055069837415237 2026-02-12 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3memtrnln4o2v 2026-02-14 08:18:58+00:00| seen|...

GHSA-GWMX-9GCJ-332H

creationtimestamp| type| source ---|---|--- 2026-02-12 00:10:05+00:00| seen| https://gist.github.com/alon710/41968f4cd423a2eb06975ee5587fe1d5...

lavinmq 安全漏洞

LavinMQ is an open-source message queue and streaming media server developed by CloudAMQP. Prior to LavinMQ 2.6.8, there were security vulnerabilities. These vulnerabilities stemmed from the ability of authenticated users with the Policymaker tag to bypass access controls, allowing them to create...