13191 matches found
CVE-2026-87794 bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...
CVE-2026-87794
bestzip (Node.js package node-bestzip) versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function. Attackers can inject arbitrary arguments to the Info-ZIP backend by supplying a malicious destination path combined with crafted source entries, leading to arbitr...
CVE-2026-87794 bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...
CVE-2026-79967
creationtimestamp| type| source ---|---|--- 2026-09-09 09:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hhqvpzqsp4m2n...
CVE-2026-79973
creationtimestamp| type| source ---|---|--- 2026-09-09 09:46:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqkrahgnc6b4r...
CVE-2026-19729
A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...
CVE-2026-21095
creationtimestamp| type| source ---|---|--- 2026-09-09 06:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2uoswgdi2w 2026-09-12 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvchqz457m25...
EUVD-2026-74705
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the secret that gates access to any order and, through it, that...
CVE-2026-87735
creationtimestamp| type| source ---|---|--- 2026-09-09 05:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hrm3l4j6b6ej3...
GHSA-JQ6G-CCMP-VCCR
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:09+00:00| seen| https://t.me/IntelEncyclopedia/2852 2026-09-10 00:00:46+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/2852...
GHSA-P6HP-93WP-FH6P
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101570 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101570...
CVE-2026-11991
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101547 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101547...
CVE-2006-3626
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101493 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101493...
CVE-2026-77262
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:06+00:00| seen| https://t.me/GithubRedTeam/101570 2026-09-10 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101570 2026-09-22 20:28:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hys4dy5zhd3kx...
CVE-2026-72744
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:05+00:00| seen| https://t.me/GithubRedTeam/101664 2026-09-10 00:00:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101664...
CVE-2026-58941
creationtimestamp| type| source ---|---|--- 2026-09-09 04:49:33+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-49887
creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:15+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-49884
creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:13+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...