72416 matches found
CVE-2026-43925
creationtimestamp| type| source ---|---|--- 2026-07-07 00:29:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdyralas2y...
CVE-2026-43927
creationtimestamp| type| source ---|---|--- 2026-07-07 00:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdlwa5hw2w...
CVE-2026-53642
creationtimestamp| type| source ---|---|--- 2026-07-07 00:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcyzwgmt2a...
CVE-2026-53644
creationtimestamp| type| source ---|---|--- 2026-07-07 00:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcoa7h4v23...
GHSA-V64M-XXFW-HRV6
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...
GHSA-MP3F-59PG-C5PP
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...
PT-2026-56299
Name of the Vulnerable Software and Affected Versions Better Auth versions prior to 1.6.11 Better Auth versions 1.6.14 and later Description An issue exists in the organization plugin where the acceptInvitation, rejectInvitation, getInvitation, and listUserInvitations endpoints do not sufficientl...
RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.7 (RHSA-2026:36342)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36342 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Ha...
Linux Distros Unpatched Vulnerability : CVE-2026-14801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtinprobeduration of the file...
Important: haproxy
Issue Overview: HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table...
CVE-2026-35361
creationtimestamp| type| source ---|---|--- 2026-07-06 23:11:39+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36 2026-07-07 00:00:03+00:00| seen| https://gist.github.com/alon710/6c1cffea0af70b2d894e0c1c7fb89b36...
GHSA-5493-9M76-2QRR
creationtimestamp| type| source ---|---|--- 2026-07-06 21:31:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpz22a66p72b...
GHSA-5WG6-JMQ2-53PW Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing
Summary Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the workspace was resolved by ID without confirming the URL's username matched the real owner, while the CORS middleware trusted the...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the CORS origin validation process. An attacker can gain unauthorized access to sensitive data by crafting a subdomain that encodes their own workspace UUID and a victim's username, then tricking an...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the CORS origin validation process. An attacker can gain unauthorized access to sensitive data by crafting a subdomain that encodes their own workspace UUID and a victim's username, then tricking an...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID
Summary UpsertWorkspaceApp overwrites an existing app's agentid on a primary-key conflict and insertAgentApp accepts the app ID from the provisioner's CompleteJob payload without verifying it belongs to the workspace being built. CompleteJob runs under dbauthz.AsProvisionerd so the authorization...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UpsertWorkspaceApp process. An attacker can gain unauthorized access to another user's workspace app by submitting a crafted payload with a known victim app UUID and an...