Lucene search
+L

2552805 matches found

Github Security Blog
Github Security Blog
added 2026/08/20 6:36 p.m.8 views

Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Impact When Pipelines-as-Code is configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by default. The token retains access to all repositories in the GitHub App installation. This...

5.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/20 6:36 p.m.6 views

GHSA-F5F4-3HH4-F54M Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

8.2CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/08/20 6:36 p.m.8 views

Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

5.3AI score
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/20 6:36 p.m.19 views

CVE-2026-54167

CVE-2026-54167 is reserved with no public technical details, affected product, or exploitation information available; monitor for updates when details are published.{

SaveExploits0References2
OSV
OSV
added 2026/08/20 6:36 p.m.6 views

GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

2.6CVSS6.5AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/08/20 6:36 p.m.11 views

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

7.5CVSS8AI score0.00591EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/08/20 6:36 p.m.5 views

GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...

4.7CVSS5.7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/20 6:36 p.m.7 views

Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...

5.6AI score
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/08/20 6:35 p.m.6 views

node-opcua missing nonce verification in UserNameIdentityToken authentication

Summary A missing nonce verification in the UserNameIdentityToken authentication handler allows an unauthenticated remote attacker to forge a password token that extracts as an empty string, and to replay captured authentication tokens across sessions. Affected versions: = 2.165.0 Tested version:...

5.6AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/20 6:35 p.m.4 views

GHSA-MQ36-523M-X7VV node-opcua missing nonce verification in UserNameIdentityToken authentication

Summary A missing nonce verification in the UserNameIdentityToken authentication handler allows an unauthenticated remote attacker to forge a password token that extracts as an empty string, and to replay captured authentication tokens across sessions. Affected versions: = 2.165.0 Tested version:...

7.7CVSS5.6AI score
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/20 6:35 p.m.4 views

NPM: next-video: Unauthenticated arbitrary file read via /api/video request handler

NPM: next-video: Unauthenticated arbitrary file read via /api/video request handler vulnerability discovered by ? in WordPress Npm next-video versions = 2.8.0...

5.4AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/20 6:35 p.m.5 views

GHSA-2P39-2JF3-FV2Q next-video: Unauthenticated arbitrary file read via /api/video request handler

Impact The HTTP route handler exported by next-video/request-handler — which the README instructs consumers to mount at /api/video — allows an unauthenticated remote attacker to read arbitrary .json files from the production filesystem of any application following the documented setup. The...

6.9CVSS5.7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/20 6:35 p.m.7 views

next-video: Unauthenticated arbitrary file read via /api/video request handler

Impact The HTTP route handler exported by next-video/request-handler — which the README instructs consumers to mount at /api/video — allows an unauthenticated remote attacker to read arbitrary .json files from the production filesystem of any application following the documented setup. The...

5.6AI score
SaveExploits0References4Affected Software1
GithubExploit
GithubExploit
added 2026/08/20 6:32 p.m.15 views

Exploit for CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1: Unauthenticated Pr...

9.8CVSS5.8AI score0.00303EPSS
SaveExploits2
Vulnrichment
Vulnrichment
added 2026/08/20 6:32 p.m.5 views

CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

9.3CVSS6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/20 6:32 p.m.10 views

EUVD-2026-63544

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

9.3CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2026/08/20 6:32 p.m.30 views

CVE-2026-19586

CVE-2026-19586 is a pre-authentication OS command injection flaw in TP-Link Omada gateways running the OpenVPN Server feature, caused by insufficient validation of client-supplied data during connection establishment. CVSS 9.3 (Critical), network-reachable, no auth required. Exploitation requires...

9.3CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/20 6:32 p.m.30 views

CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

9.3CVSS
SaveExploits0References3
OSV
OSV
added 2026/08/20 6:30 p.m.5 views

GHSA-P853-83GJ-WJJ3 NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

6.7CVSS6.5AI score0.0037EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/08/20 6:30 p.m.7 views

NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

6.7CVSS6.4AI score0.0037EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder