58305 matches found
PT-2026-57034
Name of the Vulnerable Software and Affected Versions YesWiki version 4.6.5 Description An issue exists in the Bazar widget handler where the id GET parameter is reflected into HTML attributes using only the strip tags function. Since strip tags does not escape double quotes, an unauthenticated...
PT-2026-56887
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description In the backend/open webui/routers/terminals.py file, the ws terminal upstream URL is constructed using an unencoded session id and appends user id as a query parameter. This allows for query...
PT-2026-56882
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a...
Linux Distros Unpatched Vulnerability : CVE-2026-59930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable...
PT-2026-56811
Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions prior to 7.22 Description An out-of-bounds read exists in the built-in TLS server function mg tls server recv hello. The issue occurs when the function uses an attacker-controlled session id len byte from a TLS...
CVE-2026-51603
A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 firmware V31.1.9.91 allows an unauthenticated remote attacker to cause a denial of service via a crafted second SETUP request. After completing the OPTIONS, DESCRIBE, and a legitimate first SETUP request to obtain a...
RHEL 8 : cups (RHSA-2026:36733)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:36733 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups:...
CVE-2026-55542
creationtimestamp| type| source ---|---|--- 2026-07-08 23:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6a62hksq2l...
CVE-2026-0288
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent TSA component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted...
GHSA-Q95X-7G78-RCCV
creationtimestamp| type| source ---|---|--- 2026-07-08 20:42:49+00:00| seen| https://gist.github.com/alon710/e724b6feec120f49892cbfa2764ae8ba...
BELL-CVE-2026-56002
Bulletin has no description...
CVE-2026-0288
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent TSA component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted...
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent TSA component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted...
CVE-2026-59890
creationtimestamp| type| source ---|---|--- 2026-07-08 19:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5vm6vmlj2i 2026-07-21 20:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h35f-9h28-mq5c 2026-07-22 12:00:52+00:00| seen|...
MINI-83Q2-7J3C-PJWG
Bulletin has no description...
MAL-2026-7020 Malicious code in react-v17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dab7161ffcaee5f943894308dd75428e9081b872daaed7ef50218bf98ad44a Package name 'react-v17' impersonates the legitimate 'react' package. package.json declares a preinstall hook 'node index.js' that auto-executes on n...
CVE-2026-59896
creationtimestamp| type| source ---|---|--- 2026-07-08 19:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tg7c5df2g 2026-07-11 01:46:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdk5bfkh22e...
CVE-2026-59895
creationtimestamp| type| source ---|---|--- 2026-07-08 19:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tcmefry2e...
CVE-2026-0279
creationtimestamp| type| source ---|---|--- 2026-07-08 19:03:36+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sp3jznu2s 2026-07-08 23:03:19+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq6a3q4wus2f 2026-07-09 04:46:10+00:00| seen|...