30683 matches found
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK ServerKeyExchange message. Remediation Upgrade...
CVE-2026-14340
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...
CVE-2026-14340 An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositories
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...
CVE-2026-14340
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...
EUVD-2026-41145
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...
CVE-2026-14340
GitHub Enterprise Server (GitHub ES) suffers an incorrect authorization vulnerability (CVE-2026-14340) where a user-to-server token scoped to a GitHub App installation could perform write operations on public repositories outside the token’s scope. The root cause is an authorization check that on...
GHSA-4J6X-2764-M8GH Rancher has over-inclusive team membership expansion in GitHub App authentication provider
Impact A vulnerability has been identified within Rancher Manager in the GitHub App authentication provider. When evaluating permissions, the provider incorrectly expands user team memberships to include all teams within the associated GitHub organization, rather than restricting access to the...
EUVD-2026-40297
Rancher has over-inclusive team membership expansion in GitHub App authentication provider...
CVE-2026-49864
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:13+00:00| published-proof-of-concept| https://github.com/butlerx/wetty/security/advisories/GHSA-p26j-h7wj-r568...
CVE-2026-49986
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:11+00:00| published-proof-of-concept| https://github.com/cdeust/Cortex/security/advisories/GHSA-gvpp-v77h-5w8g...
GHSA-Q64V-9MH2-3XCQ vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-R6WJ-XMGR-MG33 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-P6J5-JRMM-J3W6 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-6H2Q-2X4R-5652 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-X945-JM33-F3QV vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-H6XQ-J8XX-3FV4 vulnerabilities
Vulnerabilities for packages: firefox-esr...
Malicious code in twrap-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9903cc9163ada9951dee4ee1f364648cac0e492df9a32582ad3ed8303d29231 twraptool/init.py defines two public functions, formatblock and aligncolumns, whose real behavior is to fetch a Python file from...
ExploitKnowdledgebase
poc2detect Defense-first pipeline that discovers GitHub proof...