33501 matches found
CVE-2026-88017
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:23+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77 2026-09-11 11:09:30+00:00| seen| https://gist.github.com/alon710/bdeb340c6c170113e47b6e3cbfb5203b 2026-09-11 16:00:46+00:00|...
CVE-2026-88015
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:16+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-p6m2-r3w9-mpxw...
CVE-2026-88016
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:14+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-f8g7-2xjc-7mfh 2026-09-11 16:00:46+00:00| seen|...
CVE-2026-88014
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:12+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-66hp-wgxq-6f5q...
CVE-2026-88008
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:03+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326 2026-09-27 23:00:08+00:00| seen| https://t.me/GithubRedTeam/103588 2026-09-27 23:00:08+00:00| published-proof-of-concept|...
CVE-2026-88012
creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-7ghq-v6jf-g56c...
CVE-2026-88011
creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:10+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-rf44-j88r-hh8c...
CVE-2026-87015
creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7...
@argos-ci/core: CI Branch Name OS Command Injection
CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...
CVE-2026-88060
creationtimestamp| type| source ---|---|--- 2026-09-10 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xhjqk72f 2026-09-10 22:35:14+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-v3p8-whq6-r5jg...
CVE-2026-88062
creationtimestamp| type| source ---|---|--- 2026-09-10 22:08:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72tqjxvr2t 2026-09-10 22:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xjylga2y 2026-09-10 22:35:07+00:00| published-proof-of-concept|...
CVE-2026-88056
creationtimestamp| type| source ---|---|--- 2026-09-10 21:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6xm5stpu2f 2026-09-10 22:35:16+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-f6mr-pjwc-34m4...
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...
NPM: n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
NPM: n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...
EUVD-2026-74276
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open...
GHSA-5M98-CGCR-XX3Q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...
CVE-2026-55416
creationtimestamp| type| source ---|---|--- 2026-09-10 20:35:08+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-23rh-xw42-fq82...
CVE-2026-56346
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5x2w-37xf-7962...