72635 matches found
CVE-2026-58170 Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization agent/src/live/mandate/commit.py. A proposal identifier containing path traversal sequences causes the application to load an...
PSF-2026-32
In the Tarfile.extract function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract function...
CVE-2026-14162
creationtimestamp| type| source ---|---|--- 2026-06-30 14:14:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6sbwizm2v 2026-07-01 02:34:06+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...
MINI-MR5C-85X9-68JM
Bulletin has no description...
MINI-79C8-VCM6-8W87
Bulletin has no description...
CVE-2026-58010
creationtimestamp| type| source ---|---|--- 2026-06-30 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6dq57qp2t 2026-07-03 12:18:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjqorsrj2j 2026-07-05 03:23:39+00:00| seen|...
MINI-C4H2-7PV8-C7VQ
Bulletin has no description...
MINI-F3MC-2P7V-RCQ8
Bulletin has no description...
MINI-HPJP-HHGX-V5PF
Bulletin has no description...
MINI-324H-VM65-7JGQ
Bulletin has no description...
MINI-CF6G-JW9F-X9G6
Bulletin has no description...
MINI-QP5H-PHX4-PXVR
Bulletin has no description...
MINI-6C83-J9M3-F56H
Bulletin has no description...
MINI-XF3P-9Q8G-PR65
Bulletin has no description...
MINI-4MMG-J324-J89G
Bulletin has no description...
MINI-6G22-W89V-Q8W3
Bulletin has no description...
MINI-4P29-87X5-X2F3
Bulletin has no description...
MINI-FXXX-3QRR-HCG9
Bulletin has no description...