34883 matches found
CVE-2026-55065
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:30+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-gg93-x632-9ccv 2026-08-30 15:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnwabjtq2l...
CVE-2026-55066
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:28+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-5pg6-m483-7vrg...
CVE-2026-55067
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-569v-q83c-3j3g...
CVE-2026-55521
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:19+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-962x-ccwf-8x6p 2026-08-30 09:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubzpnh6ly27...
CVE-2026-55547
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:17+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-cvw4-55pp-3hfq...
CVE-2026-55559
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:13+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-73mf-m39p-wpm9 2026-08-28 22:08:32+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6esqhrrz25 2026-08-30 08:50:05+00:00|...
CVE-2026-55565
creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:10+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-c64q-hj4j-375f 2026-08-28 22:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6esyapvs2b 2026-08-29 18:10:06+00:00|...
GHSA-8FRH-VHGH-64CF
creationtimestamp| type| source ---|---|--- 2026-08-28 18:32:25+00:00| seen| https://gist.github.com/alon710/cba9cd0b7b8bf1e82dc1ef5c661263b6...
CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2026-55378
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
EUVD-2026-67859
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values
JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...
CVE-2026-55378
JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...
GHSA-5P2G-FCMC-QVQQ
creationtimestamp| type| source ---|---|--- 2026-08-28 17:56:32+00:00| seen| https://gist.github.com/alexjohnbyrne44/f77a0ac2192c769065a4fcc0db1ff771...
GHSA-W3RX-R6R6-PGPR
creationtimestamp| type| source ---|---|--- 2026-08-28 17:56:32+00:00| seen| https://gist.github.com/alexjohnbyrne44/f77a0ac2192c769065a4fcc0db1ff771...
GHSA-X8MJ-6P3Q-G5PP
creationtimestamp| type| source ---|---|--- 2026-08-28 17:33:07+00:00| seen| https://gist.github.com/alon710/6afc3d410daf4fc14ca37ccd754d5535...
CVE-2026-55068
creationtimestamp| type| source ---|---|--- 2026-08-28 17:33:07+00:00| seen| https://gist.github.com/alon710/6afc3d410daf4fc14ca37ccd754d5535 2026-08-28 18:35:23+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp 2026-08-28 22:07:40+00:00...