58327 matches found
CVE-2026-34167
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the ActivityMonitor Livewire component exposes a public $activityId property without Livewire's Locked attribute. It loads activities via Activity::find$this-activityId wit...
CVE-2026-59713
creationtimestamp| type| source ---|---|--- 2026-07-06 21:27:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzsbi5df26...
CVE-2026-59710 showdown - Stored XSS via Unescaped Table Header ID Attribute Injection
showdown contains a stored cross-site scripting vulnerability in the parseHeaders function of src/subParsers/makehtml/tables.js that fails to properly escape table header ID attributes. Attackers can inject arbitrary HTML and script-executing SVG elements through double-quote characters in markdo...
CVE-2026-59710
Showdown (the Showdown library) contains a stored XSS flaw in parseHeaders (src/subParsers/makehtml/tables.js) where table header ID attributes are not properly escaped. Attackers can inject arbitrary HTML and script-executing SVG elements through double-quote characters in Markdown table headers...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the CORS origin validation process. An attacker can gain unauthorized access to sensitive data by crafting a subdomain that encodes their own workspace UUID and a victim's username, then tricking an...
CVE-2026-21369
creationtimestamp| type| source ---|---|--- 2026-07-06 21:03:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116875054272966899...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
Authentication Bypass by Alternate Name
Overview Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name via improper handling of OIDC authentication and the emailverified claim. An attacker can gain unauthorized access to another user's account by authenticating with an email address matching the...
CVE-2026-35371
creationtimestamp| type| source ---|---|--- 2026-07-06 20:12:01+00:00| seen| https://gist.github.com/alon710/f5f0c292471d2cc05167d6fa94d49a4e...
GHSA-XV5W-CW7X-72GJ id: pretty-print uses effective GID instead of effective UID for name lookup
The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...
EUVD-2026-25019
id: pretty-print uses effective GID instead of effective UID for name lookup...
CVE-2026-14536
creationtimestamp| type| source ---|---|--- 2026-07-06 19:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuiedjme2v...
CVE-2026-24013
creationtimestamp| type| source ---|---|--- 2026-07-06 19:09:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpys3zc3ua2g 2026-07-06 20:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywluimbu2z 2026-07-08 06:37:06+00:00| seen|...
CVE-2026-58380
creationtimestamp| type| source ---|---|--- 2026-07-06 16:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyklqfidn2z...
CVE-2025-53828
creationtimestamp| type| source ---|---|--- 2026-07-06 16:22:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyiqllwq72d...
CVE-2025-53827
creationtimestamp| type| source ---|---|--- 2026-07-06 16:02:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhmrqo542c 2026-07-06 17:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpym7ct5ri23...
ECHO-89C2-9149-2F37
Bulletin has no description...
ECHO-14ED-0EDC-CB07
Bulletin has no description...