31424 matches found
CVE-2026-44179
creationtimestamp| type| source ---|---|--- 2026-06-21 19:03:12+00:00| published-proof-of-concept| https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the endDoctypeDecl process when handling NOTATION declarations. An attacker can cause memory corruption or potentially execute arbitrary code by providing specially crafted XML input. Remediation A fix...
Malicious code in requests-enhancer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f61f1a905e0ec1bb593f7b20d4f9a8a9e72deeb16440f72acbcaf00aeab1cd On import requestsenhancer, the package's init.py spawns a daemon thread that runs pip install...
CVE-2026-50519
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
EUVD-2026-38089
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-50519
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: rancher-webhook, crossplane-provider-aws-elasticache, grafana-image-renderer, lazydocker, cerbos, neuvector-scanner, apisix-ingress-controller, crossplane-provider-family-azure, kubo, thanos, crossplane-provider-aws-firehose, vault-env,...
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the CRI checkpoint restore plugin due to improper validation of symlinked paths. An attacker can access arbitrary files on the host by crafting a malicious checkpoint image and leveraging the...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726
AWX/AUTOMATION-CONTROLLER GitHub webhook integration vulnerability (CVE-2026-12726): processing of GitHub pull_request webhooks stores statuses_url from the payload without validating it points to a trusted GitHub API endpoint. If a job template uses a GitHub Personal Access Token as the webhook ...
CVE-2026-12726 Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2026-55691
creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...
CVE-2026-55446
creationtimestamp| type| source ---|---|--- 2026-06-19 13:09:48+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9...
CVE-2026-55770
creationtimestamp| type| source ---|---|--- 2026-06-19 11:28:09+00:00| published-proof-of-concept| https://github.com/openbao/openbao/security/advisories/GHSA-6mwx-4547-5vc9...
CVE-2026-55195
creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:20+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-gjrg-mpp7-g774 2026-07-08 22:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66cvk66i27...
CVE-2026-55206
creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:10+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-h4gh-22qq-72r7 2026-07-08 22:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66rc3cyn2i...
CVE-2026-23879
creationtimestamp| type| source ---|---|--- 2026-06-19 09:31:59+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7 2026-06-24 22:16:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d 2026-06-24 23:14:35+00:00|...