72196 matches found
CVE-2026-19284
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
EUVD-2026-54781
A weakness has been identified in andreahaku llmmemorymcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llmmemorymcp. Executing a manipulation of the argument hash can lead to command injection...
CVE-2026-71556
creationtimestamp| type| source ---|---|--- 2026-08-08 11:33:31+00:00| seen| https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a...
GHSA-HC8V-WWC9-VGXM
creationtimestamp| type| source ---|---|--- 2026-08-08 11:33:31+00:00| seen| https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: guac, gitlab-runner, nfpm, scorecard, kubescape, witness, src-fingerprint, bom, cerbos, kargo, trivy, argocd-image-updater, kots, pulumi-kubernetes-operator, syft, gomplate, trufflehog, pulumi, kaniko, gptscript, goreleaser, tfsec, xeol, boring-registry, kyverno,...
CGA-5RCR-HJ5P-4FC7
Bulletin has no description...
CVE-2026-19270
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
CVE-2026-63220
creationtimestamp| type| source ---|---|--- 2026-08-08 06:36:21+00:00| seen| https://gist.github.com/alon710/8161c68753a945887582acb72752fba7...
CVE-2026-14231
creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...
GHSA-GM37-52C6-37MW
creationtimestamp| type| source ---|---|--- 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...
CVE-2026-58262
creationtimestamp| type| source ---|---|--- 2026-08-07 23:00:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/curgxorgfb4gn...
CVE-2026-47127
Summary: Ghostfolio prior to 3.4.0 allowed any authenticated user to self-grant a 1-year Premium subscription via the Stripe checkout success callback at GET /api/v1/subscription/stripe/callback?checkoutSessionId=, which unconditionally assigns the session’s client_reference_id without checking s...
Exploit for CVE-2026-64638
No d...
GHSA-5P4M-2WFM-XMQJ
creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502...
CVE-2026-70623
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CGA-P833-R6G2-379X
Bulletin has no description...
ECHO-D1BB-4D4F-3EA6
Bulletin has no description...
ECHO-6324-D2F6-0441
Bulletin has no description...
CVE-2026-19243
A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed...