Lucene search
+L

30609 matches found

Vulnrichment
Vulnrichment
added 2026/07/14 5:8 p.m.8 views

CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability

...

7.8CVSS6.1AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/14 5:4 p.m.35 views

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

6.5CVSS0.00612EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/14 5:4 p.m.6 views

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

6.5CVSS6.1AI score0.00612EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 5:4 p.m.32 views

CVE-2026-47282

Summary: CVE-2026-47282 concerns insufficiently protected credentials in GitHub Copilot and Visual Studio Code, leading to potential information disclosure over a network. Impact and scope (as per metrics): CVSS 3.1 base score 6.5 (Medium); attack vector: NETWORK; attack complexity: LOW; privileg...

6.5CVSS6.1AI score0.00612EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/07/14 2:0 p.m.17 views

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score0.00861EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/14 2:0 p.m.10 views

GitHub Copilot Remote Code Execution Vulnerability

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00233EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/14 2:0 p.m.17 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.1AI score0.00612EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 8:40 a.m.5 views

BIT-COMPOSER-2026-59947 Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug verbosity, it could print a credential embedded in the username slot of a repository or package URL, such as a GitHub Personal Access Token in https://TOKEN@host/, to debug outp...

4.7CVSS6.1AI score0.0012EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/14 1:16 a.m.11 views

CVE-2026-15620

A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of the file tools/toolwebfetch.go. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be...

6.5CVSS0.00228EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/14 12:45 a.m.7 views

CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

4.8CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/14 12:0 a.m.37 views

CVE-2026-15619 mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery

A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function webfetch of the file tools/toolwebfetch.go of the component IPv4 Handler. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. The exploi...

7.5CVSS0.00252EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2026/07/14 12:0 a.m.8 views

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...

9.8CVSS8.3AI score0.0074EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.19 views

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21310-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21310-1 advisory. Changes in gh: - Update to version 2.96.0: Critical security fix: patched vulnerability in gh codespace jupyter that could allow command executi...

9.6CVSS6.2AI score0.00861EPSS
SaveExploits0References25
Cvelist
Cvelist
added 2026/07/13 10:34 p.m.38 views

CVE-2026-58489 HedgeDoc: CSRF in GitHub Gist export callback

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not...

6.8CVSS0.00126EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/13 10:34 p.m.8 views

CVE-2026-58489

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not...

6.8CVSS6.1AI score0.00126EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/13 10:34 p.m.20 views

CVE-2026-58489

HedgeDoc prior to v1.11.0 is vulnerable to a CSRF-like flaw in the GitHub Gist export callback. The OAuth2 state value was only checked for presence, not validated against the user session, allowing an attacker to craft a callback URL with their own valid GitHub OAuth code. When a logged-in victi...

6.8CVSS6.1AI score0.00126EPSS
SaveExploits0References2
Circl
Circl
added 2026/07/13 10:0 p.m.11 views

CVE-2020-8636

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:19+00:00| seen| https://t.me/GithubRedTeam/90443 2026-07-14 00:00:36+00:00| seen| https://t.me/GithubRedTeam/90443 2026-07-15 00:00:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90443...

10CVSS7AI score0.04014EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/13 10:0 p.m.10 views

CVE-2026-34207

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:18+00:00| seen| https://t.me/GithubRedTeam/90703 2026-07-14 00:00:34+00:00| seen| https://t.me/GithubRedTeam/90703 2026-07-15 00:00:21+00:00| seen| https://t.me/GithubRedTeam/90703 2026-07-16 19:00:30+00:00| seen|...

7.6CVSS4.8AI score0.00239EPSS
SaveExploits2References1
Circl
Circl
added 2026/07/13 10:0 p.m.14 views

CVE-2323-41892

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:15+00:00| seen| https://t.me/GithubRedTeam/91392 2026-07-14 00:00:32+00:00| seen| https://t.me/GithubRedTeam/91392 2026-07-15 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/91392...

6.1AI score
SaveExploits0References1
Circl
Circl
added 2026/07/13 10:0 p.m.8 views

CVE-2026-25194

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-14 00:00:17+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-15 00:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92513...

6.1AI score
SaveExploits0References1
Rows per page
Query Builder