23493 matches found
CVE-2026-13561
creationtimestamp| type| source ---|---|--- 2026-06-29 15:42:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtam2pkz2d 2026-06-29 20:08:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphc5ek3da2o...
CVE-2026-13560
creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgja2ndnm2n 2026-06-29 20:16:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphclnasu625...
PYSEC-2026-487 PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
Summary The memory hooks executor in praisonaiagents passes a user-controlled command string directly to subprocess.run with shell=True at src/praisonai-agents/praisonaiagents/memory/hooks.py lines 303 to 305. No sanitization, no shlex.quote, no character filter, and no allowlist check exists...
CVE-2026-13549
creationtimestamp| type| source ---|---|--- 2026-06-29 11:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfw2fged2g...
CVE-2026-13533
creationtimestamp| type| source ---|---|--- 2026-06-29 07:59:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzfpsmfa2j 2026-06-29 10:52:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgd2qkew72w 2026-06-29 19:56:38+00:00| seen|...
CVE-2026-13523
creationtimestamp| type| source ---|---|--- 2026-06-29 04:22:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfnaqtydc2e 2026-06-29 14:52:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqgyn5cy2d...
Medium: ecs-init
Issue Overview: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.12.20260629 or dnf update --advisory ALAS2023-2026-1906 --releasever 2023.12.20260629 to update your system. More...
Medium: ecs-init
Issue Overview: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Affected Packages: ecs-init Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL...
PT-2026-53671
Name of the Vulnerable Software and Affected Versions Mythic versions prior to 3.4.0.60 Description An authorization bypass exists that allows authenticated users with the spectator role to perform unauthorized write operations. This occurs because the 'eventing import automatic webhook' endpoint...
CVE-2026-13486
creationtimestamp| type| source ---|---|--- 2026-06-28 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpdredg6hw27 2026-06-28 14:07:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe5ietq2d22 2026-06-29 15:06:07+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-53241
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct sndseqevent into a stack temporary,...
Linux Distros Unpatched Vulnerability : CVE-2026-53198
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL A deferred byte-range lock an SMB2LOCK that blocks registers an async work on...
CVE-2026-56447
creationtimestamp| type| source ---|---|--- 2026-06-27 20:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpccs6lve22g...
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
...
Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
...
SUSE CVE-2026-13311
shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...
GHSA-72R4-9C5J-MJ57
creationtimestamp| type| source ---|---|--- 2026-06-27 01:42:35+00:00| seen| https://gist.github.com/alon710/8e13d6d37310b61ef33c4ee0f35eeb61...
[SECURITY] Fedora 43 Update: pacemaker-3.0.2-3.fc43
Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be...
GHSA-4GXV-P5G5-J7W7
creationtimestamp| type| source ---|---|--- 2026-06-26 23:42:14+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4 2026-06-27 00:00:58+00:00| seen| https://gist.github.com/alon710/aef49efca881722a2606f374108f34f4...