36492 matches found
CVE-2026-42578
creationtimestamp| type| source ---|---|--- 2026-05-05 18:05:31+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr...
GitHub: Able to bypass authorization logic and gain more access then intended
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability was fixed in versions 3.21.2, 3.20.4, 3.19.8, 3.18.11, 3.17.17, and 3.16.20. This vulnerability was...
CVE-2026-350234
creationtimestamp| type| source ---|---|--- 2026-05-05 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/82846 2026-05-05 09:00:04+00:00| seen| Telegram/YNBAQ7wY3nDaf6oW9SSpET1W5P-GdTLvm9dgaOEDkfw4Y...
PT-2026-41409
Summary Anonymous GitHub fetches repository content e.g., markdown files from GitHub's API and renders it without sanitization. On the client side, markdown is parsed with marked with sanitize: false and injected into the DOM via $sce.trustAsHtml + ng-bind-html, bypassing AngularJS's built-in XSS...
CVE-2026-44721
creationtimestamp| type| source ---|---|--- 2026-05-04 23:42:51+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gf5m-wcrh-7928...
GHSA-QG5C-HVR5-HJGR
creationtimestamp| type| source ---|---|--- 2026-05-04 23:31:29+00:00| seen| https://gist.github.com/limcheekin/b22dc88a260c8e395b6d84d05bd62a04...
GHSA-96VC-WCXF-JJFF
creationtimestamp| type| source ---|---|--- 2026-05-04 23:31:29+00:00| seen| https://gist.github.com/limcheekin/b22dc88a260c8e395b6d84d05bd62a04...
GHSA-G38R-8GMR-GHRF
creationtimestamp| type| source ---|---|--- 2026-05-04 22:10:29+00:00| seen| https://gist.github.com/alon710/15d45700e9c417f92716ddfa05ebc56f...
GHSA-X3H8-JRGH-P8JX
creationtimestamp| type| source ---|---|--- 2026-05-04 20:40:29+00:00| seen| https://gist.github.com/alon710/b60926baf5e2d9d70756e13d5032afa9...
GHSA-Q49M-57VM-C8CC
creationtimestamp| type| source ---|---|--- 2026-05-04 20:10:29+00:00| seen| https://gist.github.com/alon710/e5f670283b66e1c583d8b3f3f9d1efba...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the YAML metadata parsing process. An attacker can cause excessive memory consumption and potentially trigger an out-of-memory condition on the server by uploading a crafted image ...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the UploadAllFiles process. An attacker can cause the daemon to crash by importing a truncated or malformed backup archive that triggers a nil-pointer dereference during tar file iteration. Remediation...
io.quarkiverse.githubapp:quarkus-github-app (0.0.5), io.quarkiverse.githubapp:quarkus-github-app-deployment (0.0.5) +99 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (1.11.2.final)
io.quarkus:quarkus-vertx-http MAVEN version 1.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app 0.0.5 -...
io.quarkiverse.githubapp:quarkus-github-app (>=1.1.2, <=1.1.3), io.quarkiverse.githubapp:quarkus-github-app-deployment (>=1.1.2, <=1.1.3) +114 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.0.1.final)
io.quarkus:quarkus-vertx-http MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.3 -...
io.quarkiverse.githubapp:quarkus-github-app (>=1.5.0, <=1.6.0), io.quarkiverse.githubapp:quarkus-github-app-deployment (>=1.5.0, <=1.6.0) +111 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-vertx-http (2.5.2.final)
io.quarkus:quarkus-vertx-http MAVEN version 2.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.githubapp:quarkus-github-app =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.6.0 -...
CVE-2026-41358
creationtimestamp| type| source ---|---|--- 2026-05-04 17:10:29+00:00| seen| https://gist.github.com/alon710/d4f3d9fbcfea6645ceefb383fa46637f...
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control panels into kill switches, kernels into open doors, and open-source pipelines into silent delivery systems. The game has shifted from breach to...
CVE-2026-44009
creationtimestamp| type| source ---|---|--- 2026-05-03 21:34:48+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm 2026-07-09 07:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq753cw5on2d...
