72693 matches found
ECHO-A006-A3D7-22E0
Bulletin has no description...
ECHO-D45D-2BCA-0AAE
Bulletin has no description...
CVE-2026-7569
creationtimestamp| type| source ---|---|--- 2026-06-25 01:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bjesd6v2s 2026-06-30 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjqtn4b2y2a...
CVE-2025-60473
A NULL pointer dereference in the gffilterinparentchain function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...
GHSA-PJJP-65R7-PPGM
creationtimestamp| type| source ---|---|--- 2026-06-25 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp34su7fvx26...
PT-2026-52564
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds heap read occurs during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key...
GitLab 17.9 < 18.11.6 / 19.0 < 19.0.3 / 19.1 < 19.1.1 (CVE-2026-0934)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticate...
PT-2026-52591
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists where SNI Server Name Indication and ALPN Application-Layer Protocol Negotiation bindings are missing during stateful session-ID resumption. This...
PT-2026-52575
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.5.0 Description Broken access control allows any authenticated user to access arbitrary organization billing data. By supplying an arbitrary organizationId to the PreviewInvoiceController endpoints, an...
Linux Distros Unpatched Vulnerability : CVE-2026-53053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Fix clonealias to use the original device's devid Currently clonealias assumes first argument pdev is always the original device pointer. This functi...
CGA-XX82-PPW2-X9RH
Bulletin has no description...
CGA-QM4F-RFVV-GQXQ
Bulletin has no description...
CVE-2026-45757
creationtimestamp| type| source ---|---|--- 2026-06-24 22:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xdfcte427...
Insufficient Verification of Data Authenticity
Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...
Insufficient Verification of Data Authenticity
Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...
CVE-2026-57280
creationtimestamp| type| source ---|---|--- 2026-06-24 21:44:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2v5sgr2r27 2026-07-01 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkexekuu52l...
CVE-2026-53765 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory
Chrome DevTools for agents chrome-devtools-mcp lets your coding agent control and inspect a live Chrome browser. From 0.20.0 until 1.1.0, The chrome-devtools-mcp daemon writes its PID file with fs.writeFileSync to a deterministic runtime path. On typical macOS environments, and on Linux sessions...
MINI-7J43-JHC3-7P33
Bulletin has no description...