72644 matches found
CVE-2026-58170
creationtimestamp| type| source ---|---|--- 2026-06-30 18:21:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmmnwag72v 2026-07-02 05:58:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2eai7z2m...
CVE-2026-58377
creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...
CGA-C2WP-F5W8-P8P5
Bulletin has no description...
EUVD-2026-40361
CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.getqueryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing checkobjectpermissions call on the parentid query parameter ...
CVE-2026-58373 CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence
CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.getqueryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing checkobjectpermissions call on the parentid query parameter ...
CVE-2026-58171 Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier
Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in rundir agent/src/swarm/store.py. A crafted run identifier supplied through the MCP swarm tools causes the application to read arbitrary...
CVE-2026-58171 Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier
Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in rundir agent/src/swarm/store.py. A crafted run identifier supplied through the MCP swarm tools causes the application to read arbitrary...
CVE-2026-58170 Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization agent/src/live/mandate/commit.py. A proposal identifier containing path traversal sequences causes the application to load an...
CVE-2026-58170
CVE-2026-58170 affects Vibe-Trading
CVE-2026-58170 Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization agent/src/live/mandate/commit.py. A proposal identifier containing path traversal sequences causes the application to load an...
PSF-2026-32
In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract function...
CVE-2026-14162
creationtimestamp| type| source ---|---|--- 2026-06-30 14:14:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6sbwizm2v 2026-07-01 02:34:06+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...
MINI-MR5C-85X9-68JM
Bulletin has no description...
MINI-79C8-VCM6-8W87
Bulletin has no description...
CVE-2026-58010
creationtimestamp| type| source ---|---|--- 2026-06-30 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6dq57qp2t 2026-07-03 12:18:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjqorsrj2j 2026-07-05 03:23:39+00:00| seen|...
MINI-C4H2-7PV8-C7VQ
Bulletin has no description...
MINI-F3MC-2P7V-RCQ8
Bulletin has no description...
MINI-HPJP-HHGX-V5PF
Bulletin has no description...