Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

Github Enterprise Authenticated Remote Code Execution

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

Gogs <0.12.6 - Remote Command Execution

Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...

GHSA-M5J7-35RX-PHQ8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FGWQ-VV98-P662 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-52H6-3XQW-4R8V vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-RJXR-W76J-P937 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-7RG2-8XRH-RWH8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FHC2-C9VH-XRG3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-GQM4-GR2Q-PH9G vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-29G8-XP94-2R42 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-67438

creationtimestamp| type| source ---|---|--- 2026-07-30 16:35:33+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xc5w-4v5w-7x65 2026-07-31 08:32:20+00:00| seen| https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11...

CVE-2026-67427

creationtimestamp| type| source ---|---|--- 2026-07-30 16:35:12+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-hr7p-wg7r-hg9m 2026-07-30 23:32:08+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3 2026-07-31...

GHSA-XR9X-R78C-5HRM

creationtimestamp| type| source ---|---|--- 2026-07-30 11:36:36+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrudy2kgin2f 2026-07-30 13:34:04+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrukk3nzjy2o 2026-07-30 14:46:38+00:00| seen|...

CLEANSTART-2026-TR90585 Security fixes in terragrunt-fips 0.97.2-r3

Package terragrunt-fips version 0.97.2-r3 fixes 3 vulnerabilities: CVE-2026-34986, ghsa-xmrv-pmrh-hhx2, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-BM38174 Security fixes in istio 1.28.5-r2

Package istio version 1.28.5-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

Joomla! Component PrayerCenter 3.0.2 - SQL Injection

SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429. id: CVE-2018-7314 info: name: Joomla! Component PrayerCenter 3.0.2 - SQL Injection author: DhiyaneshDK severity: critical description: | SQL Injection...

GHSA-JR9P-4H4J-6C58

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/95796 2026-07-30 14:00:04+00:00| seen| Telegram/47AGWfAWFIwZKzQclsisfXazYjpo74QYaHVlY-riLjwoTE 2026-07-31 00:00:29+00:00| published-proof-of-concept|...