Lucene search
+L

34884 matches found

CVE
CVE
•added 2026/08/12 11:31 a.m.•100 views

CVE-2026-11325

The CVE-2026-11325 entry concerns Cloudflare’s cloudflare/pages-action, an archived repository deprecated since 2024. A remote code execution vulnerability was reported in src/index.ts that could be reachable via certain GitHub Actions workflow configurations, potentially exposing workflow secret...

8.8CVSS6.1AI score0.0068EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/12 11:31 a.m.•19 views

CVE-2026-11325

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6AI score0.0068EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/12 11:31 a.m.•23 views

EUVD-2026-57178

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6AI score0.0068EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/12 11:31 a.m.•3 views

CVE-2026-11325 cloudflare/pages-action is deprecated — migration required by September 18th, 2026

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/12 11:31 a.m.•27 views

CVE-2026-11325 cloudflare/pages-action is deprecated — migration required by September 18th, 2026

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6.1AI score0.0068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•3 views

CVE-2026-11325: Improper Neutralization of Special Elements used in an OS Command

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6AI score0.0068EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•31 views

PT-2026-71049

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

8.8CVSS6AI score0.0068EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•18 views

Debian dsa-6434 : lemonldap-ng - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6434 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6434-1 [email protected] https://www.debian.org/securit...

9.8CVSS5.8AI score0.00818EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/11 5:19 p.m.•23 views

CVE-2026-70335

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS0.00462EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/11 5:19 p.m.•16 views

CVE-2026-70335

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.4AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 5:05 p.m.•43 views

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

...

7.8CVSS5.8AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:05 p.m.•19 views

EUVD-2026-56588

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00462EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:05 p.m.•58 views

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

...

7.8CVSS0.00462EPSS
SaveExploits0References1
Circl
Circl
•added 2026/08/11 4:32 p.m.•14 views

GHSA-87FV-VQQR-M4JR

creationtimestamp| type| source ---|---|--- 2026-08-11 16:32:22+00:00| seen| https://gist.github.com/alon710/6fa389a21aaf392bd94e8f902ff02560...

4.9AI score
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•66 views

GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00462EPSS
SaveExploits0
Circl
Circl
•added 2026/08/11 9:43 a.m.•19 views

GHSA-3GMF-P6R4-Q8M6

creationtimestamp| type| source ---|---|--- 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...

4.9AI score
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:18 a.m.•19 views

GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

...

5.3CVSS5.9AI score0.00769EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:03 a.m.•12 views

GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching

...

2.1CVSS5.8AI score0.00343EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:02 a.m.•19 views

GitHub CLI: Partial token disclosure in `gh auth status` output

...

3.3CVSS5.9AI score0.00155EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:02 a.m.•14 views

GitHub CLI: Unescaped variable components in request URLs could allow path traversal

...

5.1CVSS5.9AI score0.00527EPSS
SaveExploits0
Rows per page
Query Builder