10316 matches found
CVE-2026-75062
creationtimestamp| type| source ---|---|--- 2026-08-26 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtyptvornt23 2026-08-26 18:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywfxuqju2e...
CVE-2026-74848
creationtimestamp| type| source ---|---|--- 2026-08-26 15:37:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/isgyihvqh5n7s 2026-08-27 10:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jciqmqkiujfkw...
CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries
IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip
Summary pip is used by IBM Integrated Analytics System as the standard Python package installer. Multiple vulnerabilities affect pip. CVE-2026-8643 involves improper sanitization of resolved absolute paths for consolescripts and guiscripts entry points, where pip treats them as paths instead of...
CVE-2026-18884
creationtimestamp| type| source ---|---|--- 2026-08-26 08:33:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idnghdq4gxg5t...
kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...
CVE-2026-78619
creationtimestamp| type| source ---|---|--- 2026-08-25 22:12:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/gwzqittmf6hj5...
MINI-RF79-63C3-Q24J
Bulletin has no description...
CVE-2026-57863
Crater Invoice (through 6.0.6 ) contains a path traversal vulnerability in its self-update API. The root cause is unsanitized ZIP entry names containing ../ sequences passed to PHP's ZipArchive::extractTo(), allowing authenticated company owners to write arbitrary files outside the intended extra...
CVE-2026-78864
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
BIT-KEYCLOAK-2026-16071 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary
A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name DN. Due to missing validation, the system allows lookups...
EUVD-2026-65458
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864 liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864 liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864 liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection
A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...
CVE-2026-78864
A SQL injection vulnerability exists in liketrek TREK versions up to 3.0.22 , located in the journeyService.updateEntry function within the file server/src/nest/journey/journey.controller.t (Journey Entry Update component). The flaw can be exploited remotely by an authenticated user with low priv...
WordPress Fluent Forms plugin < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability
Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin FluentForm versions 6.2.5...
CVE-2026-72699
creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsahuik2j 2026-08-25 04:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzs3rtg2p...
SUSE CVE-2026-74439
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry devicepasidtableteardown zeroes the 128-bit scalable-mode context entry with contextclearentry while the Present bit is still set. This creates a windo...