72712 matches found
CVE-2019-25763
creationtimestamp| type| source ---|---|--- 2026-06-20 15:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7z4l7zk2b...
CVE-2026-56317
creationtimestamp| type| source ---|---|--- 2026-06-20 15:50:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7iigjpi2e...
GHSA-J496-CRGH-34MX
creationtimestamp| type| source ---|---|--- 2026-06-20 15:24:39+00:00| seen| https://gist.github.com/blessingblockchain/45445c4e5d457c9c5d721a5fc93ad073...
CVE-2026-48908
creationtimestamp| type| source ---|---|--- 2026-06-20 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mopxorztly2f 2026-06-20 13:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116782676365105563 2026-06-20 13:39:57+00:00| seen|...
CVE-2026-12119
creationtimestamp| type| source ---|---|--- 2026-06-20 11:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mopsduvkqg2h...
ECHO-5509-692B-AA69
Bulletin has no description...
CGA-4J53-5RHG-65P5
Bulletin has no description...
CVE-2026-9843
creationtimestamp| type| source ---|---|--- 2026-06-20 02:43:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3mootjayro42t 2026-06-20 05:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mop5nox22k23 2026-06-20 09:00:30+00:00| seen|...
CVE-2026-56216
creationtimestamp| type| source ---|---|--- 2026-06-20 02:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moordyr6of2v...
CVE-2026-56213
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsertversionmeta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated attackers to insert arbitrary rows into versionmeta for any appid. Attackers can exploit this by calling the RPC...
Linux Distros Unpatched Vulnerability : CVE-2026-8461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be...
CGA-V43F-5GF4-32GG
Bulletin has no description...
CVE-2026-48584
creationtimestamp| type| source ---|---|--- 2026-06-19 22:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moofhtv2b42q 2026-06-22 00:36:50+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnfcrouu2v 2026-06-22 09:01:14+00:00| seen|...
Directory Traversal
Overview everos is an EverOS — local-first markdown memory framework for AI agents and user chats; lightweight, dev-friendly, small-team Affected versions of this package are vulnerable to Directory Traversal via the senderid field in the POST /api/v1/memory/add endpoint. An attacker can create o...
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
Summary EnvironmentManager.restoreenv, backupId computes the backup path with joinenvDir, '.backups', backupId and only checks that this path exists. It does not resolve the result or verify that it remains under data//.backups. A caller can pass a traversal backup ID such as...
GHSA-QWQC-P3Q8-WCG9 Langflow: Unauthenticated DoS through multipart form boundary file upload
Summary An attacker can send a /api/v1/files/upload/ request without any authentication token/cookies and abuse a very long multipart form boundary to make the langflow app unusable for all users for an indefinite amount of time. Details...
Prototype Pollution
Overview flat-to-nested is a Convert a hierarchy from flat to nested representation. Affected versions of this package are vulnerable to Prototype Pollution in the convert function when processing input records containing specially crafted parent or id values such as proto. An attacker can inject...
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance
Impact CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffic. NetNamedPipe creates a shared memory object based on the listening url, then generated a unique GUID for the named pipe it will be using and saves this ...
CVE-2026-50519
The CVE-2026-50519 entry concerns GitHub Copilot and Visual Studio Code where a resource initialized with an insecure default can allow an unauthorized attacker to disclose information over a network. Public sources (NVD) describe the impact as confidentiality compromise with network-exposed disc...